Modeling Safe Reconfiguration with the FUJABA Real-Time Tool Suite

Software systems are increasingly built to exhibit self-* properties (e.g. self healing or self optimization) which require reconfiguration and change at runtime. This is even true for embedded or mechatronic systems which are often used in safety critical environments. In those cases, the effects of the reconfiguration on the safety of the system must be carefully analyzed. We present an approach to ensure the safety of self-* systems during runtime by checking whether a reconfiguration is allowed w.r.t. the hazard probability and the associated damage after the reconfiguration. The approach has been implemented as plugins for the Fujaba Real-Time Tool Suite.