Synchronous Modelling of Complex Systems

Size: px
Start display at page:

Download "Synchronous Modelling of Complex Systems"

Transcription

1 Synchronous Modelling of Complex Systems Nicolas Halbwachs Verimag, Grenoble joint work with L. Mandel LRI E. Jahier, P. Raymond, X. Nicollin Verimag and D. Lesens Astrium Space Transportation () 1 / 45

2 The Synchronous Paradigm 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 2 / 45

3 The Synchronous Paradigm The Synchronous Paradigm (1/8) Synchronous machines Basic components: generalized Mealy machines X S f Y = fy ( X, S) S = f S ( X, S) Behaviour: ( S 0, X 0, Y 0 ),( S 1, X 1, Y 1 ),...,( S n, X n, Y n ),..., with Y n = f Y ( X n, S n ) and S n+1 = f S ( X n, S n ) Deterministic! () 3 / 45

4 The Synchronous Paradigm The Synchronous Paradigm (2/8) Basic components, simple examples unit delay δ: outputs the value received at the previous reaction f O ( X, S) = S, f S ( X, S) = X sampler β(b): outputs the current input if b is true, the previous output otherwise f O (b, X, S) = f S (b, X, S) = if b then X else S () 4 / 45

5 The Synchronous Paradigm The Synchronous Paradigm (3/8) Example: an integrator x Outputs the sum of inputs received so far + y f Y (x,s) = f S (x,s) = s + x s 0 () 5 / 45

6 The Synchronous Paradigm The Synchronous Paradigm (3/8) Example: an integrator x Outputs the sum of inputs received so far + y In Lustre: f Y (x,s) = f S (x,s) = s + x y = x+s ; s = 0 ->pre(y) ; s 0 () 5 / 45

7 The Synchronous Paradigm The Synchronous Paradigm (3/8) Example: an integrator x Outputs the sum of inputs received so far + y In Lustre: f Y (x,s) = f S (x,s) = s + x s 0 y = x+s ; s = 0 ->pre(y) ; or y = x + (0 ->pre(y)) ; () 5 / 45

8 The Synchronous Paradigm The Synchronous Paradigm (3/8) Example: an integrator x Outputs the sum of inputs received so far + y In Lustre: f Y (x,s) = f S (x,s) = s + x s 0 y = x+s ; s = 0 ->pre(y) ; or y = x + (0 ->pre(y)) ; step x x 0 x 1 x 2 x 3... () 5 / 45

9 The Synchronous Paradigm The Synchronous Paradigm (3/8) Example: an integrator x Outputs the sum of inputs received so far + y In Lustre: f Y (x,s) = f S (x,s) = s + x s 0 y = x+s ; s = 0 ->pre(y) ; or y = x + (0 ->pre(y)) ; step x x 0 x 1 x 2 x 3... y x 0 x 0 + x 1 x 0 + x 1 + x 2 x 0 + x 1 + x 2 + x 3... () 5 / 45

10 The Synchronous Paradigm The Synchronous Paradigm (4/8) Example: a counter of events Detect a minute every 60 second In Lustre: ns = 0 -> if second then if pre(ns) < 59 then pre(ns)+1 else 0 else pre(ns) ; minute = (second and ns=0) ; second? ns=59? ns:=0 minute! ns:=0 second? ns<59? ns++ In Esterel every 60 second do emit minute ; () 6 / 45

11 The Synchronous Paradigm The Synchronous Paradigm (5/8) Synchronous machines Parallel composition: S S X f Y () 7 / 45

12 The Synchronous Paradigm The Synchronous Paradigm (5/8) Synchronous machines Parallel composition: S S X f Y ( S, Y ) = f ( X, S, Z ) ( T, Z ) = g( W, T, Y ) W T g T Z (deterministic, provided there is no combinational loop) () 7 / 45

13 The Synchronous Paradigm The Synchronous Paradigm (6/8) Parallel composition, example every 60 second do emit minute ; every 60 second do emit minute ; second count minute count hour () 8 / 45

14 The Synchronous Paradigm The Synchronous Paradigm (7/8) Parallel composition, example ns:=0 nm:=0 second? ns=59? ns:=0 minute! second? ns<59? ns++ minute? nm=59? nm:=0 hour! minute? nm<59? nm++ second? ns=59? nm<59? ns:=0 nm++ minute! ns:=nm:=0 second? ns<59? ns++ second? ns=59? nm=59? ns:=nm:=0 minute! hour! () 9 / 45

15 The Synchronous Paradigm The Synchronous Paradigm (8/8) Synchronous languages are well accepted as description formalisms precise, formally defined match the way of thinking of users various, complementary, compatible paradigms (imperative/data-flow, textual/graphical) Powerful associated tools efficient code generation (for centralized, statically scheduled applications) precise and inexpensive modelling, no overhead in analysis and verification can be used for expressing properties (observers) Industrial environments: Esterel Studio, Lustre-Scade, Signal-Sildex () 10 / 45

16 Synchrony and Asynchrony 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 11 / 45

17 Synchrony and Asynchrony Synchrony and Asynchrony (1/3) Synchronous languages and associated tools are well-established for centralized, statically scheduled applications What about more complex situations? Need for dynamic scheduling: urgent sporadic events, multiple periods Need for distribution: redundancy, performances, physical constraints () 12 / 45

18 Synchrony and Asynchrony Synchrony and Asynchrony (2/3) First remark: In real-time systems, purely asynchronous situations are rare Partial synchrony, or strongly constrained asynchrony: e.g., known periods known clock drift quite precise WCET () 13 / 45

19 Synchrony and Asynchrony Synchrony and Asynchrony (3/3) Related works: () 14 / 45

20 Synchrony and Asynchrony Synchrony and Asynchrony (3/3) Related works: extend the synchronous model CRP [Berry-Shyamasundar-Ramesh], Multiclock-Esterel [Berry-Sentovitch], n-synchrony [Cohen-Duranton-Eisenbeis-Pagetti-Plateau-Pouzet], GALS [Metropolis], [Polychrony], Tag machines [Benveniste-Caillaud-Carloni-Sangiovanni] () 14 / 45

21 Synchrony and Asynchrony Synchrony and Asynchrony (3/3) Related works: extend the synchronous model CRP [Berry-Shyamasundar-Ramesh], Multiclock-Esterel [Berry-Sentovitch], n-synchrony [Cohen-Duranton-Eisenbeis-Pagetti-Plateau-Pouzet], GALS [Metropolis], [Polychrony], Tag machines [Benveniste-Caillaud-Carloni-Sangiovanni] less synchronous implementations Multi-task implementations [SYNDEX], [Caspi-Scaife], Distributed code [Caspi-Girault],[Caspi-Salem], [Potop-Caillaud] () 14 / 45

22 Synchrony and Asynchrony Synchrony and Asynchrony (3/3) Related works: extend the synchronous model CRP [Berry-Shyamasundar-Ramesh], Multiclock-Esterel [Berry-Sentovitch], n-synchrony [Cohen-Duranton-Eisenbeis-Pagetti-Plateau-Pouzet], GALS [Metropolis], [Polychrony], Tag machines [Benveniste-Caillaud-Carloni-Sangiovanni] less synchronous implementations Multi-task implementations [SYNDEX], [Caspi-Scaife], Distributed code [Caspi-Girault],[Caspi-Salem], [Potop-Caillaud] model asynchrony within the synchronous framework SafeAir, SafeAir-II projects [Baufreton et-al], Polychrony [Le Guernic-Talpin-Le Lann], [Gamatié-Gautier], this talk (same approach, in the ctxt of the Assert project) () 14 / 45

23 Synchrony and Asynchrony The ASSERT Project (1/2) European Integrated Project ( ) on model-driven design of embbedded systems Main application domain: aerospace applications () 15 / 45

24 Synchrony and Asynchrony The ASSERT Project (1/2) European Integrated Project ( ) on model-driven design of embbedded systems Main application domain: aerospace applications Target architecture (AADL) Software components (UML, Scade, C) Target code () 15 / 45

25 Synchrony and Asynchrony The ASSERT Project (2/2) What this talk is about: Target architecture (AADL) Automatic translation Software components (Scade) Behavioural model of the architecture (Scade-Lustre) Simulation Verification () 16 / 45

26 Synchronous Modelling of Asynchrony 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 17 / 45

27 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (1/5) Need to prevent a component from reacting (sporadic reactions) non-determinism model execution time () 18 / 45

28 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (2/5) Prevent a component from reacting available in all synchronous languages: clocks in Lustre and Signal activation conditions in Scade suspend statement in Esterel () 19 / 45

29 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (3/5) Activation condition in Scade c A distinguished Boolean input, say c, decides if the component must react. X Y () 20 / 45

30 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (3/5) Activation condition in Scade c A distinguished Boolean input, say c, decides if the component must react. when c = 1 the normal reaction occurs X Y () 20 / 45

31 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (3/5) Activation condition in Scade c A distinguished Boolean input, say c, decides if the component must react. when c = 1 the normal reaction occurs when c = 0 the state does not change X Y () 20 / 45

32 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (3/5) Activation condition in Scade c A distinguished Boolean input, say c, decides if the component must react. when c = 1 the normal reaction occurs when c = 0 the state does not change the output keeps its previous value X Y () 20 / 45

33 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony(4/5) Non determinism Just by adding auxiliary inputs (oracles) Restriction of non-determinism: constraints/assumptions on oracles ensured by assertions or transducer (scheduler) () 21 / 45

34 Synchronous Modelling of Asynchrony A task in the synchronous world x () 22 / 45

35 Synchronous Modelling of Asynchrony A task in the synchronous world x t () 22 / 45

36 Synchronous Modelling of Asynchrony A task in the synchronous world x t () 22 / 45

37 Synchronous Modelling of Asynchrony A task in the synchronous world x t x () 22 / 45

38 Synchronous Modelling of Asynchrony A sporadic or periodic task () 23 / 45

39 Synchronous Modelling of Asynchrony A sporadic or periodic task t () 23 / 45

40 Synchronous Modelling of Asynchrony A sporadic or periodic task T t () 23 / 45

41 Synchronous Modelling of Asynchrony A sporadic or periodic task x T t x () 23 / 45

42 Synchronous Modelling of Asynchrony A sporadic or periodic task period T x T t x () 23 / 45

43 Synchronous Modelling of Asynchrony Execution time period T () 24 / 45

44 Synchronous Modelling of Asynchrony Execution time period T t () 24 / 45

45 Synchronous Modelling of Asynchrony Execution time period T m M m M m M t () 24 / 45

46 Synchronous Modelling of Asynchrony Execution time period T m M m M m M t x () 24 / 45

47 Synchronous Modelling of Asynchrony Execution time ω period T (m, M) x m M m M m M t x () 24 / 45

48 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (5/5) A quite general structure: P Q () 25 / 45

49 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (5/5) A quite general structure: C P C Q P Q () 25 / 45

50 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (5/5) A quite general structure: Ω P Ω Q Sched. C P C Q P Q () 25 / 45

51 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (5/5) A quite general structure: Ω P Ω Q Sched. C P C Q P Q () 25 / 45

52 Synchronous Modelling of Asynchrony Synchronous Modelling of Asynchrony (5/5) A quite general structure: Ω P Ω Q Ω pq Ω qp Sched. C P c pq C Q P c qp Q () 25 / 45

53 A case study 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 26 / 45

54 A case study The PFS case study (1/5) Proximity Flight Safety (PFS), part of the Automatic Transfer Vehicule (ATV), spacecraft in charge of supplying the International Space Station (ISS) ESA, Astrium-ST Ensures the safety of the approach of the ATV to the ISS (most safety critical part of the mission) () 27 / 45

55 A case study When anything goes wrong, the PFS is in charge of safely moving the ATV apart from the ISS, and to orient it towards the sun ( Collision Avoidance Manoeuvre, CAM) () 28 / 45

56 A case study The PFS case study (3/5) The system is made of two redundant Monitoring and Safety Units (MSU): one master, one backup Each MSU: detects anomalies: failures of the main computer, abnormal state of the bus, erroneous position or speed of the ATV, red button pressed from inside the ISS detects its own failures (master change) is able to perform a CAM () 29 / 45

57 A case study The PFS case study (4/5) At each instant, one of the MSU is the master. If the master detects its own failure, it transmits its mastership to the other MSU. However, such a master change can only occur once in a mission master change is forbidden during a CAM () 30 / 45

58 A case study The PFS case study (5/5) Distribution: Two computers (one for each MSU) running in quasi-synchrony Multitasking: Each MSU consists of two periodic tasks (one fast, one slow). Each task specified in Scade () 31 / 45

59 A case study The PFS case study (5/5) Distribution: Two computers (one for each MSU) running in quasi-synchrony Multitasking: Each MSU consists of two periodic tasks (one fast, one slow). Each task specified in Scade Fast thread Fast thread Slow thread Slow thread SP1 SP2 SP1 SP2 Processor 1 Processor 2 () 31 / 45

60 Quasi-synchrony 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 32 / 45

61 Quasi-synchrony Quasi-synchrony (1/2) [Caspi et al, FTRTFT 00, Safecomp 01] Several periodic processes on different computers Supposed to run with the same clock Small clock drift, under which the following assumption can be made: Between two successive activations of one periodic process, each other process is activated either 0, or 1, or at most 2 times P 1 P 2 () 33 / 45

62 Quasi-synchrony Quasi-synchrony (2/2) In case of simple communication (e.g., by shared memory), each process can only miss or duplicate at most one output in a row from any other process: P P () 34 / 45

63 Quasi-synchrony Modeling quasi-synchrony (1/2) 2 processes P and Q, activated by conditions C P, C Q Assumption: between 2 occurrences of C i there are at most 2 occurrences of C j Ambiguous, because of simultaneity... Precise assumption: Each condition cannot be true alone more than twice in a row. If a condition occurs alone twice in a row, the other condition must follow alone () 35 / 45

64 Quasi-synchrony Modeling quasi-synchrony (2/2) Non-deterministic quasi-synchronous scheduler Ω P Ω Q C P C Q () 36 / 45

65 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 0 () 37 / 45

66 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 01/01 0 1Q () 37 / 45

67 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 01/ /10 1Q 1P () 37 / 45

68 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 01/ /10 1Q 1P () 37 / 45

69 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 00/00 1Q 01/01 11/ /10 1P () 37 / 45

70 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 00/00 1Q 01/01 11/ /10 10/10 1P () 37 / 45

71 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 00/00 1Q 01/01 11/ /10 10/10 1P 01/01 2Q () 37 / 45

72 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 00/00 1Q 01/01 11/ /10 10/10 1P 00/00 01/01 00/00 2Q 10/10 01/10 11/10 () 37 / 45

73 Quasi-synchrony Quasi-synchronous scheduler Ω P,Ω Q /C P,C Q 11/11 00/00 00/00 1Q 01/ /10 11/11 11/11 01/01 00/00 1P 10/10 01/01 10/10 00/00 2Q 10/10 01/10 11/10 01/01 2P 10/01 11/01 00/00 () 37 / 45

74 Translating AADL concepts 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 38 / 45

75 Translating AADL concepts Processes: actual clocks Proc 1 Proc 2 Fast Th Fast Th Slow Th SP 1 SP 2 () 39 / 45

76 Translating AADL concepts Processes: actual clocks Proc 1 Proc 2 Fast Th Fast Th Slow Th SP 1 SP 2 Quasi-synchronous clocks used to count periods and deadlines () 39 / 45

77 Translating AADL concepts Threads: sharing the processor Proc 1 Fast Th Slow Th () 40 / 45

78 Translating AADL concepts Threads: sharing the processor Proc 1 Fast Th Slow Th () 40 / 45

79 Translating AADL concepts Threads: sharing the processor Proc 1 Fast Th Slow Th Activity clocks, used to count execution times () 40 / 45

80 Translating AADL concepts Subprograms: sequencing () 41 / 45

81 Translating AADL concepts Subprograms: sequencing () 41 / 45

82 Translating AADL concepts Subprograms: sequencing () 41 / 45

83 Translating AADL concepts Final model QS T F Mm T F Mm SCH SCH T S Mm Mm T S Mm Mm () 42 / 45

84 Translating AADL concepts Applications extensive simulation (using the tool LURETTE to generate oracles automatically) automatic verification Example of property of the PFS: at each instant, one and only one MSU is the master () 43 / 45

85 Translating AADL concepts Applications extensive simulation (using the tool LURETTE to generate oracles automatically) automatic verification Example of property of the PFS: at each instant, one and only one MSU is the master Wrong, because of asynchrony. Right property: at each instant, there is at most one master there are at most two clock cycles without master () 43 / 45

86 Current work and conclusion 1 The Synchronous Paradigm 2 Synchrony and Asynchrony 3 Synchronous Modelling of Asynchrony 4 A case study 5 Quasi-synchrony 6 Translating AADL concepts 7 Current work and conclusion () 44 / 45

87 Current work and conclusion Other works deterministic communication [ACSD2006] scheduling policies and resource management [FASE2009] () 45 / 45

88 Current work and conclusion Other works deterministic communication [ACSD2006] scheduling policies and resource management [FASE2009] Conclusion Gives precise semantics to AADL Makes it executable (early simulation/validation) One more non-synchronous application of synchrony () 45 / 45

Simulation and Verification of Asynchronous Systems by means of a Synchronous Model

Simulation and Verification of Asynchronous Systems by means of a Synchronous Model c IEEE Computer Society ress, ACSD 06 Simulation and Verification of Asynchronous Systems by means of a Synchronous Model Nicolas Halbwachs and Louis Mandel Vérimag, Grenoble France Abstract Synchrony

More information

A Multi-Periodic Synchronous Data-Flow Language

A Multi-Periodic Synchronous Data-Flow Language Julien Forget 1 Frédéric Boniol 1 David Lesens 2 Claire Pagetti 1 firstname.lastname@onera.fr 1 ONERA - Toulouse, FRANCE 2 EADS Astrium Space Transportation - Les Mureaux, FRANCE November 19, 2008 1 /

More information

From Concurrent Multiclock Programs to Deterministic Asynchronous Implementations

From Concurrent Multiclock Programs to Deterministic Asynchronous Implementations From Concurrent Multiclock Programs to Deterministic Asynchronous Implementations Dumitru Potop-Butucaru Robert de Simone Yves Sorel Jean-Pierre Talpin INRIA, France {FirstName.LastName}@inria.fr Abstract

More information

From Concurrent Multi-clock Programs to Deterministic Asynchronous Implementations

From Concurrent Multi-clock Programs to Deterministic Asynchronous Implementations From Concurrent Multi-clock Programs to Deterministic Asynchronous Implementations Dumitru Potop-Butucaru Robert de Simone Yves Sorel Jean-Pierre Talpin INRIA, France {FirstName.LastName}@inria.fr Abstract

More information

N-Synchronous Kahn Networks A Relaxed Model of Synchrony for Real-Time Systems

N-Synchronous Kahn Networks A Relaxed Model of Synchrony for Real-Time Systems N-Synchronous Kahn Networks A Relaxed Model of Synchrony for Real-Time Systems Albert Cohen 1, Marc Duranton 2, Christine Eisenbeis 1, Claire Pagetti 1,4, Florence Plateau 3 and Marc Pouzet 3 POPL, Charleston

More information

Embedded system design with the Polychronous paradigm Albert Benveniste Inria/Irisa

Embedded system design with the Polychronous paradigm Albert Benveniste Inria/Irisa Embedded system design with the Polychronous paradigm Albert Benveniste Inria/Irisa With contributions by lots of people: Paul Le Guernic, Benoît Caillaud, Thierry Gautier, Jean-Pierre Talpin, Loic Besnard

More information

A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design

A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design S. Xu, R. Kumar, S. Jiang, and S. Ramesh Abstract We study the problem of desynchronization, i.e., semantics-preserving

More information

Synchronous Programming

Synchronous Programming Synchronous Programming Gérard Berry http://www.college-de-france.fr/site/en-gerard-berry/ Collège de France Chair Algorithms, Machines, and Languages Académie des sciences Académie des technologies Academia

More information

Integer Clocks and Local Time Scales

Integer Clocks and Local Time Scales Integer Clocks and Local Time Scales Part I Part II Adrien Guatto ENS - PARKAS SYNCHRON 2014 Adrien Guatto (ENS - PARKAS) Integer Clocks and Local Time Scales SYNCHRON 2014 1 / 31 Part I Adrien Guatto

More information

The Quasi-Synchronous Approach to Distributed Control Systems

The Quasi-Synchronous Approach to Distributed Control Systems The Quasi-Synchronous Approach to Distributed Control Systems Paul Caspi caspi@imag.fr Verimag Laboratory http://www-verimag.imag.fr Crisys Esprit Project http://borneo.gmd.de/ ap/crisys/ The Quasi-Synchronous

More information

A Multi-Periodic Synchronous Data-Flow Language

A Multi-Periodic Synchronous Data-Flow Language A Multi-Periodic Synchronous Data-Flow Language Julien Forget, Frédéric Boniol, David Lesens, Claire Pagetti To cite this version: Julien Forget, Frédéric Boniol, David Lesens, Claire Pagetti. A Multi-Periodic

More information

A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design

A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design 2008 American Control Conference Westin Seattle Hotel, Seattle, Washington, USA June 11-13, 2008 WeC14.6 A Simulation Condition for Correct Asynchronous Implementation of Synchronous Design S. Xu, R. Kumar,

More information

Design of Embedded Systems: Models, Validation and Synthesis (EE 249) Lecture 9

Design of Embedded Systems: Models, Validation and Synthesis (EE 249) Lecture 9 Design of Embedded Systems: Models, Validation and Synthesis (EE 249) Lecture 9 Prof. Dr. Reinhard von Hanxleden Christian-Albrechts Universität Kiel Department of Computer Science Real-Time Systems and

More information

Composing Heterogeneous Reactive Systems

Composing Heterogeneous Reactive Systems Composing Heterogeneous Reactive Systems ALBERT BENVENISTE and BENOÎT CAILLAUD Irisa/Inria LUCA P. CARLONI Columbia University PAUL CASPI Verimag and ALBERTO L. SANGIOVANNI-VINCENTELLI University of California,

More information

Relaxing Synchronous Composition with Clock Abstraction

Relaxing Synchronous Composition with Clock Abstraction Relaxing Synchronous Composition with Clock Abstraction Albert Cohen Louis Mandel Florence Plateau Marc Pouzet Université Paris-Sud and INRIA Saclay - Ile-de-France Synchronous data-flow languages such

More information

Causality and Scheduling Constraints in Heterogeneous Reactive Systems Modeling

Causality and Scheduling Constraints in Heterogeneous Reactive Systems Modeling Causality and Scheduling Constraints in Heterogeneous Reactive Systems Modeling Albert Benveniste 1, Benoît Caillaud 1, Luca P. Carloni 2, Paul Caspi 3 and Alberto L. Sangiovanni-Vincentelli 2 1 Irisa/Inria,

More information

Analysis of Periodic Clock Relations in Polychronous Systems

Analysis of Periodic Clock Relations in Polychronous Systems Analysis of Periodic Clock Relations in Polychronous Systems Hugo Metivier, Jean-Pierre Talpin, Thierry Gautier, and Paul Le Guernic Abstract The polychronous (synchronous, multiclocked) language Signal

More information

Embedded Systems Development

Embedded Systems Development Embedded Systems Development Lecture 2 Finite Automata & SyncCharts Daniel Kästner AbsInt Angewandte Informatik GmbH kaestner@absint.com Some things I forgot to mention 2 Remember the HISPOS registration

More information

Robust and Extensible Task Implementations of Synchronous Finite State Machines

Robust and Extensible Task Implementations of Synchronous Finite State Machines Robust and Extensible Task Implementations of Synchronous Finite State Machines Qi Zhu UC Riverside qzhu@ee.ucr.edu Peng Deng UC Riverside pdeng002@ucr.edu Marco Di Natale Scuola Superiore S. Anna marco@sssup.it

More information

Embedded Systems Development

Embedded Systems Development Embedded Systems Development Lecture 3 Real-Time Scheduling Dr. Daniel Kästner AbsInt Angewandte Informatik GmbH kaestner@absint.com Model-based Software Development Generator Lustre programs Esterel programs

More information

Modeling and Validating Globally Asynchronous Design in Synchronous Frameworks

Modeling and Validating Globally Asynchronous Design in Synchronous Frameworks Modeling and Validating Globally Asynchronous Design in Synchronous Frameworks MohammadReza Mousavi 1, Paul Le Guernic 2, Jean-Pierre Talpin 2, Sandeep Kumar Shukla 3, Twan Basten 1 1 Eindhoven University

More information

A framework for modeling the distributed deployment of synchronous designs

A framework for modeling the distributed deployment of synchronous designs Form Method Syst Des (2006) 28: 93 110 DOI 10.1007/s10703-006-7842-x A framework for modeling the distributed deployment of synchronous designs Luca P. Carloni Alberto L. Sangiovanni-Vincentelli Published

More information

Quasi-synchrony. Timothy Bourke 1,2. 1. INRIA Paris. 2. École normale supérieure (DI)

Quasi-synchrony. Timothy Bourke 1,2. 1. INRIA Paris. 2. École normale supérieure (DI) Quasi-synchrony Timothy Bourke 1,2 1. INRIA Paris 2. École normale supérieure (DI) Timothy.Bourke@inria.fr These slides describe research together with Guillaume Baudart and Marc Pouzet 31 October 2017,

More information

Time and Schedulability Analysis of Stateflow Models

Time and Schedulability Analysis of Stateflow Models Time and Schedulability Analysis of Stateflow Models Marco Di Natale Scuola Superiore S. Anna Haibo Zeng Mc Gill University Outline Context: MBD of Embedded Systems Relationship with PBD An Introduction

More information

An Automotive Case Study ERTSS 2016

An Automotive Case Study ERTSS 2016 Institut Mines-Telecom Virtual Yet Precise Prototyping: An Automotive Case Study Paris Sorbonne University Daniela Genius, Ludovic Apvrille daniela.genius@lip6.fr ludovic.apvrille@telecom-paristech.fr

More information

EECS 144/244: Fundamental Algorithms for System Modeling, Analysis, and Optimization

EECS 144/244: Fundamental Algorithms for System Modeling, Analysis, and Optimization EECS 144/244: Fundamental Algorithms for System Modeling, Analysis, and Optimization Discrete Systems Lecture: Automata, State machines, Circuits Stavros Tripakis University of California, Berkeley Stavros

More information

Composing Heterogeneous Reactive Systems

Composing Heterogeneous Reactive Systems Composing Heterogeneous Reactive Systems Albert Benveniste Benoît Caillaud Luca P. Carloni Paul Caspi Alberto L. Sangiovanni-Vincentelli 28th November 2005 Abstract We present a compositional theory of

More information

Failure detectors Introduction CHAPTER

Failure detectors Introduction CHAPTER CHAPTER 15 Failure detectors 15.1 Introduction This chapter deals with the design of fault-tolerant distributed systems. It is widely known that the design and verification of fault-tolerent distributed

More information

Embedded Systems 5. Synchronous Composition. Lee/Seshia Section 6.2

Embedded Systems 5. Synchronous Composition. Lee/Seshia Section 6.2 Embedded Systems 5-1 - Synchronous Composition Lee/Seshia Section 6.2 Important semantic model for concurrent composition Here: composition of actors Foundation of Statecharts, Simulink, synchronous programming

More information

P U B L I C A T I O N I N T E R N E 1549 HETEROGENEOUS REACTIVE SYSTEMS MODELING AND CORRECT-BY-CONSTRUCTION DEPLOYMENT

P U B L I C A T I O N I N T E R N E 1549 HETEROGENEOUS REACTIVE SYSTEMS MODELING AND CORRECT-BY-CONSTRUCTION DEPLOYMENT I R I P U B L I C A T I O N I N T E R N E 1549 N o S INSTITUT DE RECHERCHE EN INFORMATIQUE ET SYSTÈMES ALÉATOIRES A HETEROGENEOUS REACTIVE SYSTEMS MODELING AND CORRECT-BY-CONSTRUCTION DEPLOYMENT ALBERT

More information

Task Models and Scheduling

Task Models and Scheduling Task Models and Scheduling Jan Reineke Saarland University June 27 th, 2013 With thanks to Jian-Jia Chen at KIT! Jan Reineke Task Models and Scheduling June 27 th, 2013 1 / 36 Task Models and Scheduling

More information

Component-Based Construction of Deadlock-Free Systems

Component-Based Construction of Deadlock-Free Systems Component-Based Construction of Deadlock-Free Systems Extended Abstract Gregor Gössler 1 and Joseph Sifakis 2 1 INRIA Rhône-Alpes, goessler@inrialpes.fr 2 VERIMAG, sifakis@imag.fr Abstract. We propose

More information

{},{a},{a,c} {},{c} {c,d}

{},{a},{a,c} {},{c} {c,d} Modular verication of Argos Programs Agathe Merceron 1 and G. Michele Pinna 2 1 Basser Department of Computer Science, University of Sydney Madsen Building F09, NSW 2006, Australia agathe@staff.cs.su.oz.au

More information

Modeling Synchronous Systems in BIP

Modeling Synchronous Systems in BIP Modeling Synchronous Systems in BIP Marius Bozga Vassiliki Sfyrla Joseph Sifakis VERIMAG Centre Equation, 2 Avenue de Vignate, 38610 Gières, France FirstName.LastName@imag.fr ABSTRACT We present a general

More information

Let s now begin to formalize our analysis of sequential machines Powerful methods for designing machines for System control Pattern recognition Etc.

Let s now begin to formalize our analysis of sequential machines Powerful methods for designing machines for System control Pattern recognition Etc. Finite State Machines Introduction Let s now begin to formalize our analysis of sequential machines Powerful methods for designing machines for System control Pattern recognition Etc. Such devices form

More information

A Formal Model of Clock Domain Crossing and Automated Verification of Time-Triggered Hardware

A Formal Model of Clock Domain Crossing and Automated Verification of Time-Triggered Hardware A Formal Model of Clock Domain Crossing and Automated Verification of Time-Triggered Hardware Julien Schmaltz Institute for Computing and Information Sciences Radboud University Nijmegen The Netherlands

More information

Special Nodes for Interface

Special Nodes for Interface fi fi Special Nodes for Interface SW on processors Chip-level HW Board-level HW fi fi C code VHDL VHDL code retargetable compilation high-level synthesis SW costs HW costs partitioning (solve ILP) cluster

More information

Dynamic Semantics. Dynamic Semantics. Operational Semantics Axiomatic Semantics Denotational Semantic. Operational Semantics

Dynamic Semantics. Dynamic Semantics. Operational Semantics Axiomatic Semantics Denotational Semantic. Operational Semantics Dynamic Semantics Operational Semantics Denotational Semantic Dynamic Semantics Operational Semantics Operational Semantics Describe meaning by executing program on machine Machine can be actual or simulated

More information

Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models

Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models Edward A. Lee Robert S. Pepper Distinguished Professor Chair of EECS UC Berkeley With special thanks to Xioajun

More information

The AADL behavior annex - experiments and roadmap

The AADL behavior annex - experiments and roadmap The AADL behavior annex - experiments and roadmap R. B. França 1 J-P. Bodeveix 1 M. Filali 1 J-F. Rolland 1 D. Chemouil 2 D. Thomas 3 1 Institut de Recherche en Informatique de Toulouse Université Paul

More information

Synchronous circuits, Automata, Parallel composition

Synchronous circuits, Automata, Parallel composition Synchronous circuits, Automata, Parallel composition Marc Pouzet École normale supérieure Marc.Pouzet@ens.fr MPRI, October 28, 2014 MPRI 2.23-1 Systèmes Synchrones, Marc Pouzet November 28, 2014, page

More information

Process Scheduling for RTS. RTS Scheduling Approach. Cyclic Executive Approach

Process Scheduling for RTS. RTS Scheduling Approach. Cyclic Executive Approach Process Scheduling for RTS Dr. Hugh Melvin, Dept. of IT, NUI,G RTS Scheduling Approach RTS typically control multiple parameters concurrently Eg. Flight Control System Speed, altitude, inclination etc..

More information

Digital Design. Sequential Logic

Digital Design. Sequential Logic Principles Of igital esign Chapter 6 Sequential Logic Chapter preview Boolean algebra 3 Logic gates and flip-flops 3 Finite-state machine 6 Logic design techniques 4 Sequential design techniques 6 Binary

More information

Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models

Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models Using the Principles of Synchronous Languages in Discrete-event and Continuous-time Models Edward A. Lee Robert S. Pepper Distinguished Professor Chair of EECS UC Berkeley With special thanks to Stephen

More information

Lecture 13. Real-Time Scheduling. Daniel Kästner AbsInt GmbH 2013

Lecture 13. Real-Time Scheduling. Daniel Kästner AbsInt GmbH 2013 Lecture 3 Real-Time Scheduling Daniel Kästner AbsInt GmbH 203 Model-based Software Development 2 SCADE Suite Application Model in SCADE (data flow + SSM) System Model (tasks, interrupts, buses, ) SymTA/S

More information

Causality Interfaces for Actor Networks

Causality Interfaces for Actor Networks Causality Interfaces for Actor Networks Ye Zhou Edward A. Lee Electrical Engineering and Computer Sciences University of California at Berkeley Technical Report No. UCB/EECS-2006-148 http://www.eecs.berkeley.edu/pubs/techrpts/2006/eecs-2006-148.html

More information

Formal Specification and Verification of Task Time Constraints for Real-Time Systems

Formal Specification and Verification of Task Time Constraints for Real-Time Systems 1 Formal Specification and Verification of Task Time Constraints for Real-Time Systems Ning Ge, Marc Pantel and Xavier Crégut University of Toulouse, IRIT/INPT 2 rue Charles Camichel, BP 7122, 31071 Toulouse

More information

Synchronous Reactive Systems

Synchronous Reactive Systems Synchronous Reactive Systems Stephen Edwards sedwards@synopsys.com Synopsys, Inc. Outline Synchronous Reactive Systems Heterogeneity and Ptolemy Semantics of the SR Domain Scheduling the SR Domain 2 Reactive

More information

EECS150 - Digital Design Lecture 23 - FSMs & Counters

EECS150 - Digital Design Lecture 23 - FSMs & Counters EECS150 - Digital Design Lecture 23 - FSMs & Counters April 8, 2010 John Wawrzynek Spring 2010 EECS150 - Lec22-counters Page 1 One-hot encoding of states. One FF per state. State Encoding Why one-hot encoding?

More information

Towards Co-Engineering Communicating Autonomous Cyber-physical Systems. Bujorianu, M.C. and Bujorianu, M.L. MIMS EPrint:

Towards Co-Engineering Communicating Autonomous Cyber-physical Systems. Bujorianu, M.C. and Bujorianu, M.L. MIMS EPrint: Towards Co-Engineering Communicating Autonomous Cyber-physical Systems Bujorianu M.C. and Bujorianu M.L. 009 MIMS EPrint: 00.53 Manchester Institute for Mathematical Sciences School of Mathematics The

More information

Real-time Scheduling of Periodic Tasks (1) Advanced Operating Systems Lecture 2

Real-time Scheduling of Periodic Tasks (1) Advanced Operating Systems Lecture 2 Real-time Scheduling of Periodic Tasks (1) Advanced Operating Systems Lecture 2 Lecture Outline Scheduling periodic tasks The rate monotonic algorithm Definition Non-optimality Time-demand analysis...!2

More information

Causality Interfaces and Compositional Causality Analysis

Causality Interfaces and Compositional Causality Analysis Causality Interfaces and Compositional Causality Analysis Edward A. Lee Haiyang Zheng Ye Zhou {eal,hyzheng,zhouye}@eecs.berkeley.edu Center for Hybrid and Embedded Software Systems (CHESS) Department of

More information

CMP 338: Third Class

CMP 338: Third Class CMP 338: Third Class HW 2 solution Conversion between bases The TINY processor Abstraction and separation of concerns Circuit design big picture Moore s law and chip fabrication cost Performance What does

More information

Algorithmic verification

Algorithmic verification Algorithmic verification Ahmed Rezine IDA, Linköpings Universitet Hösttermin 2018 Outline Overview Model checking Symbolic execution Outline Overview Model checking Symbolic execution Program verification

More information

Relaxation du parallélisme synchrone pour les systèmes asynchrones communicant par buffers : réseaux de Kahn n-synchrones

Relaxation du parallélisme synchrone pour les systèmes asynchrones communicant par buffers : réseaux de Kahn n-synchrones Master Parisien de Recherche en Informatique Relaxation du parallélisme synchrone pour les systèmes asynchrones communicant par buffers : réseaux de Kahn n-synchrones Louis Mandel LRI, Université Paris-Sud

More information

Non-Preemptive and Limited Preemptive Scheduling. LS 12, TU Dortmund

Non-Preemptive and Limited Preemptive Scheduling. LS 12, TU Dortmund Non-Preemptive and Limited Preemptive Scheduling LS 12, TU Dortmund 09 May 2017 (LS 12, TU Dortmund) 1 / 31 Outline Non-Preemptive Scheduling A General View Exact Schedulability Test Pessimistic Schedulability

More information

Lecture 4. Finite Automata and Safe State Machines (SSM) Daniel Kästner AbsInt GmbH 2012

Lecture 4. Finite Automata and Safe State Machines (SSM) Daniel Kästner AbsInt GmbH 2012 Lecture 4 Finite Automata and Safe State Machines (SSM) Daniel Kästner AbsInt GmbH 2012 Initialization Analysis 2 Is this node well initialized? node init1() returns (out: int) let out = 1 + pre( 1 ->

More information

Laxity Release Optimization for Simulink Models

Laxity Release Optimization for Simulink Models Preprints of the 19th World Congress The International Federation of Automatic Control Laxity Release Optimization for imulink Models Kaijie Qin, Guiming Luo, Xibin Zhao chool of oftware, Tsinghua University,

More information

Soundness of the Quasi-Synchronous Abstraction

Soundness of the Quasi-Synchronous Abstraction Soundness of the Quasi-Synchronous bstraction Guillaume audart Timothy ourke École normale supérieure, PSL Research University Sorbonne Universités, UPM Univ. Paris 06 Inria Paris Marc Pouzet bstract Many

More information

Software Verification

Software Verification Software Verification Grégoire Sutre LaBRI, University of Bordeaux, CNRS, France Summer School on Verification Technology, Systems & Applications September 2008 Grégoire Sutre Software Verification VTSA

More information

NCU EE -- DSP VLSI Design. Tsung-Han Tsai 1

NCU EE -- DSP VLSI Design. Tsung-Han Tsai 1 NCU EE -- DSP VLSI Design. Tsung-Han Tsai 1 Multi-processor vs. Multi-computer architecture µp vs. DSP RISC vs. DSP RISC Reduced-instruction-set Register-to-register operation Higher throughput by using

More information

Parallel Composition in Biology

Parallel Composition in Biology Parallel Composition in Biology Nir Piterman Based on joint work with: J. Fisher, A. Hajnal, B. Hall, T. A. Henzinger, M. Mateescu, D. Nickovic, A.V. Singh, and M.Y. Vardi Are there useful macros to structure

More information

There are three priority driven approaches that we will look at

There are three priority driven approaches that we will look at Priority Driven Approaches There are three priority driven approaches that we will look at Earliest-Deadline-First (EDF) Least-Slack-Time-first (LST) Latest-Release-Time-first (LRT) 1 EDF Earliest deadline

More information

Some lesser-known contributions of Paul Caspi

Some lesser-known contributions of Paul Caspi Some lesser-known contributions of Paul Caspi Jacques pulou With some help from E. Closse and D. Weil France Telecom R&D MAPS/AMS/SUME research & development Paul 's Doctorate Thesis : identifying unstable

More information

Failure Tolerance of Multicore Real-Time Systems scheduled by a Pfair Algorithm

Failure Tolerance of Multicore Real-Time Systems scheduled by a Pfair Algorithm Failure Tolerance of Multicore Real-Time Systems scheduled by a Pfair Algorithm Yves MOUAFO Supervisors A. CHOQUET-GENIET, G. LARGETEAU-SKAPIN OUTLINES 2 1. Context and Problematic 2. State of the art

More information

Oce National d' Etudes. et de Recherches Aerospatiales. Centre d' Etudes et de Recherche de l' Ecole Nationale Superieure

Oce National d' Etudes. et de Recherches Aerospatiales. Centre d' Etudes et de Recherche de l' Ecole Nationale Superieure Oce National d' Etudes et de Recherches Aerospatiales Centre d' Etudes et de Recherche de l' Ecole Nationale Superieure de l'aeronautique et de l'espace a Toulouse Programming Communicating Distributed

More information

Concurrency in synchronous systems

Concurrency in synchronous systems Concurrency in synchronous systems Dumitru Potop-Butucaru, Benoit Caillaud, Albert Benveniste To cite this version: Dumitru Potop-Butucaru, Benoit Caillaud, Albert Benveniste. Concurrency in synchronous

More information

Disjunctive relational abstract interpretation for interprocedural program analysis

Disjunctive relational abstract interpretation for interprocedural program analysis Disjunctive relational abstract interpretation for interprocedural program analysis Nicolas Halbwachs, joint work with Rémy Boutonnet Verimag/CNRS, and Grenoble-Alpes University Grenoble, France R. Boutonnet,

More information

Logic BIST. Sungho Kang Yonsei University

Logic BIST. Sungho Kang Yonsei University Logic BIST Sungho Kang Yonsei University Outline Introduction Basics Issues Weighted Random Pattern Generation BIST Architectures Deterministic BIST Conclusion 2 Built In Self Test Test/ Normal Input Pattern

More information

System Model. Real-Time systems. Giuseppe Lipari. Scuola Superiore Sant Anna Pisa -Italy

System Model. Real-Time systems. Giuseppe Lipari. Scuola Superiore Sant Anna Pisa -Italy Real-Time systems System Model Giuseppe Lipari Scuola Superiore Sant Anna Pisa -Italy Corso di Sistemi in tempo reale Laurea Specialistica in Ingegneria dell Informazione Università di Pisa p. 1/?? Task

More information

A Deterministic Logical Semantics for Esterel

A Deterministic Logical Semantics for Esterel SOS 2004 Preliminary Version A Deterministic Logical Semantics for Esterel Olivier Tardieu 1 NRA Sophia Antipolis, France Abstract Esterel is a synchronous design language for the specification of reactive

More information

Fall 2008 CSE Qualifying Exam. September 13, 2008

Fall 2008 CSE Qualifying Exam. September 13, 2008 Fall 2008 CSE Qualifying Exam September 13, 2008 1 Architecture 1. (Quan, Fall 2008) Your company has just bought a new dual Pentium processor, and you have been tasked with optimizing your software for

More information

CIS 4930/6930: Principles of Cyber-Physical Systems

CIS 4930/6930: Principles of Cyber-Physical Systems CIS 4930/6930: Principles of Cyber-Physical Systems Chapter 11 Scheduling Hao Zheng Department of Computer Science and Engineering University of South Florida H. Zheng (CSE USF) CIS 4930/6930: Principles

More information

Lecture 10: Synchronous Sequential Circuits Design

Lecture 10: Synchronous Sequential Circuits Design Lecture 0: Synchronous Sequential Circuits Design. General Form Input Combinational Flip-flops Combinational Output Circuit Circuit Clock.. Moore type has outputs dependent only on the state, e.g. ripple

More information

Vidyalankar S.E. Sem. III [CMPN] Digital Logic Design and Analysis Prelim Question Paper Solution

Vidyalankar S.E. Sem. III [CMPN] Digital Logic Design and Analysis Prelim Question Paper Solution . (a) (i) ( B C 5) H (A 2 B D) H S.E. Sem. III [CMPN] Digital Logic Design and Analysis Prelim Question Paper Solution ( B C 5) H (A 2 B D) H = (FFFF 698) H (ii) (2.3) 4 + (22.3) 4 2 2. 3 2. 3 2 3. 2 (2.3)

More information

POLYCHRONY FOR SYSTEM DESIGN

POLYCHRONY FOR SYSTEM DESIGN Journal of Circuits, Systems, and Computers c World Scientific Publishing Company POLYCHRONY FOR SYSTEM DESIGN PAUL LE GUERNIC JEAN-PIERRE TALPIN JEAN-CHRISTOPHE LE LANN Inria project Espresso Irisa, Campus

More information

Quantitative Safety Analysis of Non-Deterministic System Architectures

Quantitative Safety Analysis of Non-Deterministic System Architectures Quantitative Safety Analysis of Non-Deterministic System Architectures Adrian Beer University of Konstanz Department of Computer and Information Science Chair for Software Engineering Adrian.Beer@uni.kn

More information

Preservation of LTL Properties in Desynchronized Systems

Preservation of LTL Properties in Desynchronized Systems Preservation of LTL Properties in Desynchronized Systems Yu Bai, Jens Brandt and Klaus Schneider Embedded Systems Group Department of Computer Science University of Kaiserslautern, Germany http:// es.cs.uni-kl.de

More information

Deductive Verification

Deductive Verification Deductive Verification Mooly Sagiv Slides from Zvonimir Rakamaric First-Order Logic A formal notation for mathematics, with expressions involving Propositional symbols Predicates Functions and constant

More information

The preemptive uniprocessor scheduling of mixed-criticality implicit-deadline sporadic task systems

The preemptive uniprocessor scheduling of mixed-criticality implicit-deadline sporadic task systems The preemptive uniprocessor scheduling of mixed-criticality implicit-deadline sporadic task systems Sanjoy Baruah 1 Vincenzo Bonifaci 2 3 Haohan Li 1 Alberto Marchetti-Spaccamela 4 Suzanne Van Der Ster

More information

Clock-driven scheduling

Clock-driven scheduling Clock-driven scheduling Also known as static or off-line scheduling Michal Sojka Czech Technical University in Prague, Faculty of Electrical Engineering, Department of Control Engineering November 8, 2017

More information

Software Testing Lecture 7 Property Based Testing. Justin Pearson

Software Testing Lecture 7 Property Based Testing. Justin Pearson Software Testing Lecture 7 Property Based Testing Justin Pearson 2017 1 / 13 When are there enough unit tests? Lets look at a really simple example. import u n i t t e s t def add ( x, y ) : return x+y

More information

Abstractions and Decision Procedures for Effective Software Model Checking

Abstractions and Decision Procedures for Effective Software Model Checking Abstractions and Decision Procedures for Effective Software Model Checking Prof. Natasha Sharygina The University of Lugano, Carnegie Mellon University Microsoft Summer School, Moscow, July 2011 Lecture

More information

Real Time Operating Systems

Real Time Operating Systems Real Time Operating ystems Luca Abeni luca.abeni@unitn.it Interacting Tasks Until now, only independent tasks... A job never blocks or suspends A task only blocks on job termination In real world, jobs

More information

A PRELIMINARY VERSION OF A DENOTATIONAL FRAMEWORK FOR COMPARING MODELS OF COMPUTATION. Abstract

A PRELIMINARY VERSION OF A DENOTATIONAL FRAMEWORK FOR COMPARING MODELS OF COMPUTATION. Abstract Memorandum UCB/ERL M96/33 DEPARTMENT OF ELECTRICAL ENGINEERING AND COMPUTER SCIENCE UNIVERSITY OF CALIFORNIA BERKELEY, CALIFORNIA 94720 June 4, 1996 THE TAGGED SIGNAL MODEL A PRELIMINARY VERSION OF A DENOTATIONAL

More information

Automatic determination of numerical properties of software and systems

Automatic determination of numerical properties of software and systems Automatic determination of numerical properties of software and systems Eric Goubault and Sylvie Putot Modelling and Analysis of Interacting Systems, CEA LIST MASCOT-NUM 2012 Meeting, March 21-23, 2012

More information

SMT-based Scheduling for Multiprocessor Real-Time Systems

SMT-based Scheduling for Multiprocessor Real-Time Systems SMT-based Scheduling for Multiprocessor Real-Time Systems Zhuo Cheng, Haitao Zhang, Yasuo Tan, and Yuto Lim School of Information Science, Japan Advanced Institute of Science and Technology, Japan {chengzhuo,

More information

Dynamic Noninterference Analysis Using Context Sensitive Static Analyses. Gurvan Le Guernic July 14, 2007

Dynamic Noninterference Analysis Using Context Sensitive Static Analyses. Gurvan Le Guernic July 14, 2007 Dynamic Noninterference Analysis Using Context Sensitive Static Analyses Gurvan Le Guernic July 14, 2007 1 Abstract This report proposes a dynamic noninterference analysis for sequential programs. This

More information

Concurrency in synchronous systems

Concurrency in synchronous systems Concurrency in systems Dumitru Potop-utucaru enoît Caillaud Albert enveniste IRISA, Campus de eaulieu, 3042 Rennes, rance DumitruPotop,enoitCaillaud,Albertenveniste @irisafr Abstract In this paper we introduce

More information

Mixed Criticality in Safety-Critical Systems. LS 12, TU Dortmund

Mixed Criticality in Safety-Critical Systems. LS 12, TU Dortmund Mixed Criticality in Safety-Critical Systems Prof. Dr. Jian-Jia Chen LS 12, TU Dortmund 18, July, 2016 Prof. Dr. Jian-Jia Chen (LS 12, TU Dortmund) 1 / 25 Motivation today s embedded systems use complex

More information

( c) Give logic symbol, Truth table and circuit diagram for a clocked SR flip-flop. A combinational circuit is defined by the function

( c) Give logic symbol, Truth table and circuit diagram for a clocked SR flip-flop. A combinational circuit is defined by the function Question Paper Digital Electronics (EE-204-F) MDU Examination May 2015 1. (a) represent (32)10 in (i) BCD 8421 code (ii) Excess-3 code (iii) ASCII code (b) Design half adder using only NAND gates. ( c)

More information

Simulation & Modeling Event-Oriented Simulations

Simulation & Modeling Event-Oriented Simulations Simulation & Modeling Event-Oriented Simulations Outline Simulation modeling characteristics Concept of Time A DES Simulation (Computation) DES System = model + simulation execution Data Structures Program

More information

Modeling Synchronous Systems in BIP

Modeling Synchronous Systems in BIP Unité Mixte de Recherche 5104 CNRS - INPG - UJF Centre Equation 2, avenue de VIGNATE F-38610 GIERES tel : +33 456 52 03 40 fax : +33 456 52 03 50 http://www-verimag.imag.fr Modeling Synchronous Systems

More information

Module 7. Software Engineering Issues. Version 2 EE IIT, Kharagpur 1

Module 7. Software Engineering Issues. Version 2 EE IIT, Kharagpur 1 Module 7 Software Engineering Issues Version 2 EE IIT, Kharagpur 1 Lesson 35 Modelling Timing Constraints Version 2 EE IIT, Kharagpur 2 Specific Instructional Objectives At the end of this lesson, the

More information

Proving Safety Properties of the Steam Boiler Controller. Abstract

Proving Safety Properties of the Steam Boiler Controller. Abstract Formal Methods for Industrial Applications: A Case Study Gunter Leeb leeb@auto.tuwien.ac.at Vienna University of Technology Department for Automation Treitlstr. 3, A-1040 Vienna, Austria Abstract Nancy

More information

Worst-Case Execution Time Analysis. LS 12, TU Dortmund

Worst-Case Execution Time Analysis. LS 12, TU Dortmund Worst-Case Execution Time Analysis Prof. Dr. Jian-Jia Chen LS 12, TU Dortmund 09/10, Jan., 2018 Prof. Dr. Jian-Jia Chen (LS 12, TU Dortmund) 1 / 43 Most Essential Assumptions for Real-Time Systems Upper

More information

Typing Noninterference for Reactive Programs

Typing Noninterference for Reactive Programs Typing Noninterference for Reactive Programs Ana Almeida Matos, Gérard Boudol and Ilaria Castellani June 7, 2004 Abstract We propose a type system to enforce the security property of noninterference in

More information

AUTONOMOUS AND ROBUST RENDEZVOUS GUIDANCE ON ELLIPTICAL ORBIT SUBJECT TO J 2 PERTURBATION.

AUTONOMOUS AND ROBUST RENDEZVOUS GUIDANCE ON ELLIPTICAL ORBIT SUBJECT TO J 2 PERTURBATION. AUTONOMOUS AND ROBUST RENDEZVOUS GUIDANCE ON ELLIPTICAL ORBIT SUBJECT TO J 2 PERTURBATION Emmanuel GOGIBUS (1), Hervé CHARBONNEL (2), Patrick DELPY (3) (1) Astrium Space Transportation, 66 route de Verneuil,

More information

A NEW SYSTEM FOR THE GENERATION OF UTC(CH)

A NEW SYSTEM FOR THE GENERATION OF UTC(CH) A NEW SYSTEM FOR THE GENERATION OF UTC(CH) L.G. Bernier and G. Schaller METAS Swiss Federal Office of Metrology Lindenweg 50, Bern-Wabern, CH-3003, Switzerland laurent-guy.bernier@metas.ch Abstract A new

More information

Distributed Algorithms (CAS 769) Dr. Borzoo Bonakdarpour

Distributed Algorithms (CAS 769) Dr. Borzoo Bonakdarpour Distributed Algorithms (CAS 769) Week 1: Introduction, Logical clocks, Snapshots Dr. Borzoo Bonakdarpour Department of Computing and Software McMaster University Dr. Borzoo Bonakdarpour Distributed Algorithms

More information