Lecture Notes in Computer Science 8454

Transcription

1 Lecture Notes in Computer Science 8454 Commenced Publication in 1973 Founding and Former Series Editors: Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen Editorial Board David Hutchison Lancaster University, UK Takeo Kanade Carnegie Mellon University, Pittsburgh, PA, USA Josef Kittler University of Surrey, Guildford, UK Jon M. Kleinberg Cornell University, Ithaca, NY, USA Alfred Kobsa University of California, Irvine, CA, USA Friedemann Mattern ETH Zurich, Switzerland John C. Mitchell Stanford University, CA, USA Moni Naor Weizmann Institute of Science, Rehovot, Israel Oscar Nierstrasz University of Bern, Switzerland C. Pandu Rangan Indian Institute of Technology, Madras, India Bernhard Steffen TU Dortmund University, Germany Demetri Terzopoulos University of California, Los Angeles, CA, USA Doug Tygar University of California, Berkeley, CA, USA Gerhard Weikum Max Planck Institute for Informatics, Saarbruecken, Germany

2 Laurent George Tullio Vardanega (Eds.) Reliable Software Technologies Ada-Europe th Ada-Europe International Conference on Reliable Software Technologies Paris, France, June 23-27, 2014 Proceedings 13

3 Volume Editors Laurent George University of Paris-Est Champs sur Marne, France Tullio Vardanega University of Padua, Italy ISSN e-issn ISBN e-isbn DOI / Springer Cham Heidelberg New York Dordrecht London Library of Congress Control Number: LNCS Sublibrary: SL 2 Programming and Software Engineering Springer International Publishing Switzerland 2014 This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. Exempted from this legal reservation are brief excerpts in connection with reviews or scholarly analysis or material supplied specifically for the purpose of being entered and executed on a computer system, for exclusive use by the purchaser of the work. Duplication of this publication or parts thereof is permitted only under the provisions of the Copyright Law of the Publisher s location, in ist current version, and permission for use must always be obtained from Springer. Permissions for use may be obtained through RightsLink at the Copyright Clearance Center. Violations are liable to prosecution under the respective Copyright Law. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use. While the advice and information in this book are believed to be true and accurate at the date of publication, neither the authors nor the editors nor the publisher can accept any legal responsibility for any errors or omissions that may be made. The publisher makes no warranty, express or implied, with respect to the material contained herein. Typesetting: Camera-ready by author, data conversion by Scientific Publishing Services, Chennai, India Printed on acid-free paper Springer is part of Springer Science+Business Media (

4 Preface The 19 th edition of the International Conference on Reliable Software Technologies (Ada-Europe 2014) took place in the fascinating venue of Paris, graciously hosted by the École d Ingénieurs, ECE, on their spectacular campus very close to the Eiffel Tower. With this edition, the conference returned to France for the third time after Toulouse in 2003 and Brest in Two other countries have hosted the conference three times since its inception: Spain (Santander, 1999, Palma de Mallorca, 2004, and Valencia, 2010), and the UK (London, 1997, York, 2005, and Edinburgh, 2011). Three countries hosted it twice: Switzerland (Montreux, for the inauguration in 1996, and Geneva, 2007), Sweden (Uppsala, 1998, and Stockholm, 2012), and Germany (Potsdam, 2000, and Berlin, 2013). Four countries have their hosting counter still at one: Belgium (Leuven, 2001), Austria (Vienna, 2002), Portugal (Porto, 2006) and Italy (Venice, 2008). The conference series is run and sponsored by Ada-Europe, in collaboration with local organizers, whenever possible (and luckily, often enough) representing the local Ada communities. This was the case this year, with Ada-France leading the organizing team, with precious reinforcement from members of the host institution, ECE. There were two main reasons for the conference to come to Paris. One was to facilitate an encounter between the vast industrial pole based around Paris and the 2012 revision of the Ada language standard, which makes it especially attractive where reliability is a factor. The other was to start the celebrations of the 20 th anniversary of the first validation of GNAT, which actually happened in 1995, before building a home in Paris after its birth in New York. These celebrations will peak in 2015, in nice sync with the 20 th anniversary of the conference series. The conference took place during June 23-27, 2014, featuring a rich and attractive program on both technical and social grounds. In building the program, the organizers had to choose from 68 submissions, 37 of which were for peer-reviewed papers, 12 for industrial papers, 16 for tutorials, and three for workshops. Out of this healthy batch of material, ten tutorials for the equivalent of 12 half-day sessions were scheduled on Monday and Friday, together with two full-day workshops on themes of high relevance to industrial research, one on the engineering of Dependable Cyber-Physical Systems (Monday), and the other on Mixed-Criticality Systems. The core program, run from Tuesday to Thursday, included three keynote talks, 12 presentations from peer-reviewed papers, six industrial presentations, three experience reports positioned between industry and research, one vendor session with an accompanying industrial exhibition, and a retrospective session on the first 20 years of GNAT and its ecosystem. On the Wednesday of the conference week, Ada-France also organized a special event dedicated to presenting Ada 2012 to high-ranking members of French industry.

5 VI Preface The proceedings contained in this volume cover two of the three keynote talks that opened each day of the core conference program, and the full set of peerreviewed papers. The remainder of the conference proceedings were published, in successive instalments, in the Ada User Journal, the quarterly magazine of Ada-Europe. Lessons Learned and Easily Forgotten, Robert Lainé, SPACINOV, France, delivered insights drawn from over 40 years of experience in leading large space projects. From ARTEMIS to ECSEL: Growing a Large Eco-System for High- Dependability Systems, Alun Foster, ARTEMIS, Belgium, gave testimony of the power of larger-scale collaborative research, and the importance of the public private partnership model for R&D investments. Future Challenges in Design Tools and Frameworks for Embedded Systems; Application to Intelligent Transportation Systems, Mohamed Shawky, Université de Technologie Compiègne, France, presented a synopsis of the new challenges that future designers and tool developers for intelligent transportation systems will face in the near future. Submissions to the peer-reviewed track of the conference program came from 18 countries and 87 distinct authors, from Europe, Asia, Australia, North America, and Africa. The selection was very competitive and resulted in the making of four technical sessions, all covered in this volume, on topics ranging from formal verification to real-time scheduling via Ada technology and critical applications. The tutorial program covered a rich spectrum of topics in close match with the central themes of the conference, as follows: Proving Safety of Parallel/Multi-Threaded Programs, Tucker Taft, AdaCore, USA Multicore Programming Using Divide-and-Conquer and Work Stealing,Tucker Taft, AdaCore, USA Debugging Real-Time Systems, Ian Broster and Andrew Coombes, Rapita Systems, UK Developing Mixed-Criticality Systems with GNAT/ORK and Xtratum, Alfons Crespo, Alejandro Alonso, and Jon Perez, Universidad Politècnica de València, Universidad Politécnica de Madrid, IKERLAN, Spain High-Integrity Object-Oriented Programming with Ada 2012, Ben Brosgol, AdaCore, USA Ada 2012 (Sub)type and Subprogram Contracts in Practice, Jacob Sparre- Andersen, JSA R&I, Denmark Technical Basis of Model-Driven Engineering, William Bail, MITRE, USA An Overview of Software Testing with an Emphasis on Statistical Testing, William Bail, MITRE, USA Robotic Programming, Lars Asplund, Asplund Data AB, Sweden Introduction to Verification with SPARK 2014, Rod Chapman and Yannick Moy, Altran, UK, and AdaCore, France.

6 Preface VII The industrial session featured six presentations centered on various aspects of reliable software development: From Ada 83 to Ada 2012, Philippe Gast and David Lesens, Astrium EADS, France Test Means at Airbus Defence and Space, Military Aircraft Business Line: Making Ada the Heart of an All Encompassing Aircraft Test Life Cycle, Javier Arroyo and Bartolome Lozano, Airbus Defence and Space, Spain PolarSys: Open Source Tools for Embedded Systems, and Use Cases, Gael Blondelle, Pierre Gaufillet and Silvia Mazzini, Eclipse Foundation, France, Airbus, France, Intecs, Italy Agile Software Development Compliant to Safety Standards?, Christian Scholz, Thales Transportation Systems GmbH, Germany Critical Software for the First European Rail Traffic Management System, Ana Rodriguez, Silver Atena, Spain AdDoc (Beyond a Document Generator), Robert Cholay, Systerel, France. The program also included an experience report session, which contained the following presentations: Modified Condition/Decision Coverage (MC/DC) of Ada Case Statements, Antoine Colin, Roger Braff and Andrew Coombes, Rapita Systems, UK Privacy Leaks in Java Classes, Jacob Sparre Andersen, JSA R&I, Denmark Experience in Spacecraft On Board Software Development, Juan Antonio de La Puente, Alejandro Alonso, Juan Zamorano, Jorge Garrido, Emilio Salazar and Miguel A. De Miguel, Universidad Politécnica de Madrid, Spain. Before closing this preface, we must acknowledge those who, serving in various roles some in the foreground, others in the background were central to the making of the conference program. The first to deserve gratitude are the authors of all presentations: They had a large take in the success of the event. Next come the members of the Program Committee their reviewing and advising were essential to achieving a high standard of quality in the conference proceedings, in its various guises Springer s LNCS for the peer-reviewed papers, and the Ada User Journal for the industrial presentations and the workshops. A smaller group of people ran, for a full year, the preparation, construction and execution of the conference program: Local Chair Magali Munoz; Conference Chair Jean-Pierre Rosen; Industrial Chair Jørgen Bundgaard; Publicity Chair Dirk Craeynest; Exhibition Co-chairs Jamie Ayre and Guillaume Foliard; Tutorial Co-chairs Liliana Cucu and Albert Llemosì; Finance Chair Paul Duquennoy. They all deserve a big thank you. We hope that the attendees enjoyed the conference, in both its technical and social program, as much as we did in organizing it. June 2014 Laurent George Tullio Vardanega

7 Organization Conference Chair Jean-Pierre Rosen, Ada-France Finance Chair Paul Duquennoy, Ada-France Program Co-chairs Laurent George Tullio Vardanega University of Paris-Est, Marne La Vallée, France University of Padua, Italy Industrial Chair Jørgen Bundgaard Ramboll, Denmark Tutorial Co-chairs Liliana Cucu Albert Llemosì Inria, France Universitat des Illes Balears, Spain Exhibition Co-chairs Jamie Ayre Guillaume Foliard AdaCore, France Thales, France Publicity Chair Dirk Craeynest Aubay Belgium & K.U. Leuven, Belgium Local Chair Magali Munoz ECE, France

8 X Organization Sponsoring Institutions AdaCore Altran Rapita Systems Ltd Squoring TNI Ellidiss Software Program Committee Mario Aldea Ted Baker Johann Blieberger Bernd Burgstaller Maryline Chetto Liliana Cucu Christian Fraboul Laurent George Xavier Grave Emmanuel Grolleau Jérôme Hugues Albert Llemosí Kristina Lundqvist Franco Mazzanti John McCormick Stephen Michell Laurent Pautet Luís Miguel Pinho Erhard Plödereder Juan A. de la Puente Jorge Real José Ruiz Sergio Sáez Amund Skavhaug Yves Sorel Tucker Taft Theodor Tempelmeier Elena Troubitsyna Tullio Vardanega Juan Zamorano Universidad de Cantabria, Spain US National Science Foundation, USA Technische Universität Wien, Austria Yonsei University, Korea University of Nantes, France Inria, France ENSEEIHT, France LIGM/UPEMLV ECE Paris, France Centre National de la Recherche, France ENSMA, France ISAE Toulouse, France Universitat de les Illes Balears, Spain Mälardalen University, Sweden ISTI-CNR Pisa, Italy University of Northern Iowa, USA Maurya Software, Canada Telecom ParisTech, France CISTER Research Centre/ISEP, Portugal Universität Stuttgart, Germany Universidad Politécnica de Madrid, Spain Universitat Politécnica de València, Spain AdaCore, France Universidad Politécnica de Valencia, Spain NTNU, Norway Inria, France AdaCore, USA University of Applied Sciences Rosenheim, Germany Âbo Akademi University, Finland University of Padova, Italy Universidad Politécnica de Madrid, Spain

9 Organization XI Industrial Committee Jacob Sparre Andersen Roger Brandt Ian Broster Jørgen Bundgaard Dirk Craeynest Peter Dencker Ismael Lafoz Maria del Carmen Lomba Sorrondegui Ahlan Marriott Robin Messer Quentin Ochem Steen Palm Paolo Panaroni Paul Parkinson Ana Rodriguez Jean-Pierre Rosen Alok Srivastava Jean-Loup Terraillon Rod White JSA Consulting, Denmark Roger Brandt IT Konsult AB, Sweden Rapita Systems, UK Rambøll Denmark A/S, Denmark Ada-Belgium & KU Leuven, Belgium ETAS GmbH, Germany Airbus Military, Spain GMV, Spain White Elephant, Switzerland Altran-Praxis, UK AdaCore, France Terma, Denmark Intecs, Italy Wind River, UK Silver-Atena, Spain Adalog, France TASC, USA Claus Stellwag, Elektrobit AG, Germany European Space Agency, The Netherlands MBDA, UK

10 Table of Contents Keynotes Lessons Learned and Easily Forgotten... 1 Robert Lainé Future Challenges in Design Frameworks for Embedded Systems: Application to Intelligent Transportation Systems... 7 Mohamed Shawky Formal Methods Rigorous Development of Fault-Tolerant Systems through Co-refinement Ilya Lopatkin and Alexander Romanovsky Kronecker Algebra for Static Analysis of Ada Programs with Protected Objects Bernd Burgstaller and Johann Blieberger A TASM-Based Requirements Validation Approach for Safety-Critical Embedded Systems Jiale Zhou, Yue Lu, and Kristina Lundqvist Uses of Ada Towards a Runtime Verification Framework for the Ada Programming Language André de Matos Pedro, David Pereira, Luís Miguel Pinho, and Jorge Sousa Pinto Reliable Handling of Real-Time Scheduling Attributes on Multiprocessor Platforms in Ada Sergio Sáez, Jorge Real, and Alfons Crespo Parallelism in Ada: Status and Prospects Luís Miguel Pinho, Brad Moore, and Stephen Michell Real-Time Scheduling Deadline-Aware Programming and Scheduling Alan Burns and Andy Wellings

11 XIV Table of Contents Schedulability Analysis for Directed Acyclic Graphs on Multiprocessor Systems at a Subtask Level Manar Qamhieh and Serge Midonnet Integrated Schedulers for a Predictable Interrupt Management on Real-Time Kernels Sergio Sáez and Alfons Crespo Applications PDP 4PS : Periodic-Delayed Protocol for Partitioned Systems Antoine Jaouën, Etienne Borde, Laurent Pautet, and Thomas Robert OBUs Development and Maintenance of a Train Control System for Low Density Traffic Lines Gerhard Hanis and Burkhard Stadlmann Practical Formal Methods in Railways - The SafeCap Approach Alexei Iliasov, Ilya Lopatkin, and Alexander Romanovsky Author Index