Formal Modeling and Verification of Safety-Critical Software
Rigorous quality demonstration is important when developing safety-critical software such as a reactor protection system (RPS) for a nuclear power plant. Although using formal methods such as formal modeling and verification is strongly recommended, domain experts often reject formal methods for fou...
Saved in:
Published in | IEEE software Vol. 26; no. 3; pp. 42 - 49 |
---|---|
Main Authors | , , |
Format | Journal Article |
Language | English |
Published |
Los Alamitos
IEEE
01.05.2009
IEEE Computer Society |
Subjects | |
Online Access | Get full text |
ISSN | 0740-7459 1937-4194 |
DOI | 10.1109/MS.2009.67 |
Cover
Summary: | Rigorous quality demonstration is important when developing safety-critical software such as a reactor protection system (RPS) for a nuclear power plant. Although using formal methods such as formal modeling and verification is strongly recommended, domain experts often reject formal methods for four reasons: there are too many candidate techniques, the notations appear complex, the tools often work only in isolation, and output is often too difficult for domain experts to understand. A formal-methods-based process that supports development, verification and validation, and safety analysis can help domain experts overcome these obstacles. Nuclear engineers can also use CASE tools to apply formal methods without having to know details of the underlying formalism. The authors spent more than seven years working with nuclear engineers in developing RPS software and applying formal methods. The engineers and regulatory personnel found the process effective and easy to apply with the integrated tool support. |
---|---|
Bibliography: | SourceType-Scholarly Journals-1 ObjectType-Feature-1 content type line 14 ObjectType-Article-2 content type line 23 |
ISSN: | 0740-7459 1937-4194 |
DOI: | 10.1109/MS.2009.67 |