This paper compares the tools SPIN and UPPAAL by modelling and verifying a Collision Avoidance Protocol for an Ethernet–like medium. We find that SPIN is well suited for modelling the untimed aspects of the protocol processes and for expressing the relevant (untimed) properties. However, the modelling of the media becomes ackward due to the lack of broadcast communication in the PROMELA languag...

This paper presents novel extensions and applications of the UPPAAL-SMC model checker. The extensions allow for statistical model checking of stochastic hybrid systems. We show how our race-based stochastic semantics extends to networks of hybrid systems, and indicate the integration technique applied for implementing this semantics in the UPPAAL-SMC simulation engine. We report on two applicat...

ing ESL Designs to UPPAAL System Models Che-Wei Chang, Rainer Dömer Center for Embedded and Cyber-Physical Systems University of California, Irvine Irvine, CA 92697-2625, USA (949) 824-8919 cheweic,[email protected] http://www.cecs.uci.edu Technical Report CECS-14-13 November 21, 2014 Abstracting ESL Designs to UPPAAL System Modelsing ESL Designs to UPPAAL System Models Che-Wei Chang, Rainer Dömer...

The complexity of safety critical systems consisting of software and hardware parts is continuously increasing. Formal methods address the issues of provably correct design offering mathematical techniques to create specifications to develop and verify safety critical systems [1]. They ensure that the implemented systems work correctly according to the defined specifications. In this paper, we ...

The paper describes a full procedure of executable test code generation from specification models using the Uppaal model checker. Test cases are generated for black-box testing of reactive software that is connected to the tester via an asynchronous message-based interface. For specifying the observable behaviour of the software under test we define a modelling language that is based on extende...

Relations between models are important for effective automatic validation, for comparing implementations with specifications, and for increased understanding of embedded systems designs. Timed automata may be used to model a system at multiple levels of abstraction, and timed trace inclusion is one way to relate the models. It is known that a deterministic and τ -free timed automaton can be tra...

Automatic Repeat Request (ARQ) is a control error mechanism based on the retransmissions of lost packet. This mechanism is adequate for an important number of communication protocols where reliability is of prime importance. Formal methods are indispensable for the development of these protocols in order to ensure their correctness. In this paper, we study the practical aspects of applying Even...

The Functional Mock-up Interface (FMI) is an industry standard which enables co-simulation of complex heterogeneous systems using multiple simulation engines. In this paper, we show how to use FMI in order to co-simulate hybrid systems modeled in the model checkers SPACEEX and UPPAAL. We show how FMI components can be automatically generated from SPACEEX and UPPAAL models. We also validate the ...