Model checking has become a promising automated verification technique in practice. Nevertheless, most existing model checkers are specialized for limited aspects of a system where each of them requires a certain level of expertise to use the tool in the right domain in the right way. Hardly any guideline is available on choosing the right model checker for a particular problem domain, which makes adopting the technique more difficult in practice. Based on the author's prior experience with the use of the symbolic model checker NuSMV on commercial Flight Guidance Systems (FGS) at Rockwell-Collins, the relative benefits and pitfalls of using the explicit model checker SPIN on the same problem are investigated. This has been a question from the beginning of the project with Rockwell-Collins. The challenge includes an efficient use of SPIN for the complex synchronous mode logic with a large number of state variables, where SPIN is known to be not particulary efficient. The author present the way the SPIN model is optimized to avoid the state space explosion problem, which makes SPIN scale up better than NuSMV in the end, and discuss the implication of the result. It will be hoped that the experience can be a useful reference for the future use of model checking in a similar domain.
Model checking flight guidance systems: from synchrony to asynchrony
Modellprüfung des Flugleitsystems: der Weg von der synchronen zur asynchronen Überwachung
2004
18 Seiten, 8 Bilder, 25 Quellen
Conference paper
English
Flight Simulation/Guidance Systems Simulation
NTIS | 1976
FLIGHT ROUTE GUIDANCE SYSTEM, FLIGHT ROUTE GUIDANCE DEVICE AND FLIGHT ROUTE GUIDANCE METHOD
European Patent Office | 2021
|FLIGHT VEHICLE GUIDANCE SYSTEM, FLIGHT VEHICLE GUIDANCE METHOD, AND FLIGHT VEHICLE GUIDANCE SHEET
European Patent Office | 2018
|Guidance systems in manned space flight
Engineering Index Backfile | 1959
|