Facilitating construction of safety cases from formal models in Event-B

被引:21
作者
Prokhorova, Yuliya [1 ,2 ]
Laibinis, Linas [2 ]
Troubitsyna, Elena [2 ]
机构
[1] TUCS Turku Ctr Comp Sci, Turku, Finland
[2] Abo Akad Univ, FIN-20520 Turku, Finland
关键词
Safety-critical software systems; Safety requirements; Formal development and verification; Event-B; Safety cases; Argument patterns; VERIFICATION;
D O I
10.1016/j.infsof.2015.01.001
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Context: Certification of safety-critical software systems requires submission of safety assurance documents, e.g., in the form of safety cases. A safety case is a justification argument used to show that a system is safe for a particular application in a particular environment. Different argumentation strategies (informal and formal) are applied to determine the evidence for a safety case. For critical software systems, application of formal methods is often highly recommended for their safety assurance. Objective: The objective of this paper is to propose a methodology that combines two activities: formalisation of system safety requirements of critical software systems for their further verification as well as derivation of structured safety cases from the associated formal specifications. Method: We propose a classification of system safety requirements in order to facilitate the mapping of informally defined requirements into a formal model. Moreover, we propose a set of argument patterns that aim at enabling the construction of (a part of) a safety case from a formal model in Event-B. Results: The results reveal that the proposed classification-based mapping of safety requirements into formal models facilitates requirements traceability. Moreover, the provided detailed guidelines on construction of safety cases aim to simplify the task of the argument pattern instantiation for different classes of system safety requirements. The proposed methodology is illustrated by numerous case studies. Conclusion: Firstly, the proposed methodology allows us to map the given system safety requirements into elements of the formal model to be constructed, which is then used for verification of these requirements. Secondly, it guides the construction of a safety case, aiming to demonstrate that the safety requirements are indeed met. Consequently, the argumentation used in such a constructed safety case allows us to support it with formal proofs and model checking results used as the safety evidence. (C) 2015 Elsevier B.V. All rights reserved.
引用
收藏
页码:51 / 76
页数:26
相关论文
共 72 条
  • [1] Abrial J., 2005, The B-Book-Assigning Programs to Meanings
  • [2] Abrial J.R., 2010, MODELING EVENT B SYS
  • [3] Abrial J.-R., 1996, FORMAL METHODS IND A, P500
  • [4] Abrial J.-R., 2010, CONTROLLING CARS BRI
  • [5] Abrial JR, 1998, LECT NOTES COMPUT SC, V1393, P83
  • [6] Advance Project, 2011, ADV ADV DES VER ENV
  • [7] [Anonymous], 2014, LTL MODEL CHECKING P
  • [8] [Anonymous], 2014, PROB AN MOD CHECK
  • [9] [Anonymous], 2014, RODIN PLUG INS
  • [10] [Anonymous], 2007, 0056 UK MIN DEF