Now showing 1 - 10 of 10
  • Publication
    Runtime safety assurance for adaptive cyber-physical systems: ConSerts M and ontology-based runtime reconfiguration applied to an automotive case study
    ( 2018)
    Amorim, Tiago Luiz Buarque de
    ;
    Ratasich, Denise
    ;
    Macher, Georg
    ;
    Ruiz, Alejandra
    ;
    ;
    Driussi, Mario
    ;
    Grosu, Radu
    Cyber-Physical Systems (CPS) provide their functionality by the interaction of various subsystems. CPS usually operate in uncertain environments and are often safety-critical. The constituent systems are developed by different stakeholders, who - in most cases - cannot fully know the composing parts at development time. Furthermore, a CPS may reconfigure itself during runtime, for instance in order to adapt to current needs or to handle failures. The information needed for safety assurance is only available at composition or reconfiguration time. To tackle this assurance issue, the authors propose a set of contracts to describe components' safety attributes. The contracts are used to verify the safety robustness of the parts and build a safety case at runtime. The approach is applied to a use case in the automotive domain to illustrate the concepts. In particular, the authors demonstrate safety assurance at upgrade and reconfiguration on the example of ontology-based runtime reconfiguration (ORR). ORR substitutes a failed service by exploiting the implicit redundancy of a system.
  • Publication
    DEIS: Dependability Engineering Innovation for Industrial CPS
    ( 2018)
    Armengaud, Eric
    ;
    Macher, Georg
    ;
    Massoner, Alexander
    ;
    Frager, Sebastian
    ;
    ; ;
    Longo, Simone
    ;
    Melis, Massimiliano
    ;
    Groppo, Riccardo
    ;
    Villa, Federica
    ;
    O'Leary, Padraig
    ;
    Bambury, Kevin
    ;
    Finnegan, Anita
    ;
    Zeller, Marc
    ;
    Höfig, Kai
    ;
    Papadopoulos, Yiannis
    ;
    Hawkins, Richard
    ;
    Kelly, Tim
    The open and cooperative nature of Cyber-Physical Systems (CPS) poses new challenges in assuring dependability. The DEIS project (Dependability Engineering Innovation for automotive CPS. This project has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No 732242, see http://www.deis-project.eu addresses these challenges by developing technologies that form a science of dependable system integration. In the core of these technologies lies the concept of a Digital Dependability Identity (DDI) of a component or system. DDIs are modular, composable, and executable in the field facilitating (a) efficient synthesis of component and system dependability information over the supply chain and (b) effective evaluation of this information in-the-field for safe and secure composition of highly distributed and autonomous CPS. The paper outlines the DDI concept and opportunities for application in four industrial use cases.
  • Publication
    Towards Dependability Engineering of Cooperative Automotive Cyber-Physical Systems
    ( 2017)
    Macher, Georg
    ;
    Armengaud, Eric
    ;
    ;
    Brenner, Eugen
    ;
    Kreiner, Christian
    Numerous industrial sectors are investing in Cyber-Physical-Systems (CPS). CPS provide their functionality by the interaction of various subsystems which are usually developed by different suppliers and are expected to cooperate safely. The open and cooperative nature of CPS poses a significant challenge for industrial sectors with stringent dependability constraints, such as, autonomous automobile systems, medical monitoring, process control systems, or automatic pilot avionics. As CPS may reconfigure itself during run-time, for instance in order to handle failures or to adapt on changing conditions (such as connected car features relying on availability of environmental information), the dependability of this adaptation must still be ensured. To tackle this assurance issue, several recommendations rely on a set of contracts to describe components attributes and evaluate the robustness of the configuration at run-time. In our research project, DEIS, we address these important and unsolved challenges by developing technologies for dependable system integration at run-time. At the core of these technologies lies the concept of a Digital Dependability Identity (DDI) of a component or system. DDIs are composable and executable in-the-field, facilitating (a) efficient synthesis of component and system dependability information over the supply chain and (b) effective evaluation of this information in-the-field for safe and secure composition of highly distributed and autonomous CPS. In contrast to other approaches mainly focusing on software specifics (such as SOME/IP or other SoA approaches), DDI focuses on system development level (also taking into account HW specifics and system decomposition). The paper is describing the approach focusing on the support for functional safety and validation of automated and connected vehicles, by providing an initial framework to manage dependability aspects.
  • Publication
    WAP: Digital dependability identities
    ( 2015) ; ;
    Papadopoulos, Yiannis
    ;
    Armengaud, Eric
    ;
    Zeller, Marc
    ;
    Höfig, Kai
    Cyber-Physical Systems (CPS) provide enormous potential for innovation but a precondition for this is that the issue of dependability has been addressed. This paper presents the concept of a Digital Dependability Identity (DDI) of a component or system as foundation for assuring the dependability of CPS. A DDI is an analyzable and potentially executable model of information about the dependability of a component or system. We argue that DDIs must fulfill a number of properties including being universally useful across supply chains, enabling off-line certification of systems where possible, and providing capabilities for in-field certification of safety of CPS. In this paper, we focus on system safety as one integral part of dependability and as a practical demonstration of the concept, we present an initial implementation of DDIs in the form of Conditional Safety Certificates (also known as ConSerts). We explain ConSerts and their practical operationalization based on an illustrative example.
  • Publication
    Five major reasons why safety and security haven't married (yet)
    ( 2015)
    Amorim, Tiago Luiz Buarque de
    ;
    ; ;
    Schmittner, Christoph
    ;
    Schoitsch, Erwin
    Cyber-Physical Systems (CPS) offer tremendous promise. Yet their breakthrough is stifled by deeply-rooted challenges to assuring their combined safety and security. We present five major reasons why established engineering approaches need to be rethought.
  • Publication
    EMC² AIPP, ARTEMIS CALL 2013
    ( 2014) ;
    Armengaud, Eric
    ;
    Schoitsch, Erwin
    ;
    Hufeld, Knut
  • Publication
    Using models at runtime to address assurance for self-adaptive systems
    ( 2014)
    Cheng, Betty
    ;
    Eder, Kerstin I.
    ;
    Gogolla, Martin
    ;
    Grunske, Lars
    ;
    Litoiu, Marin
    ;
    Müller, Hausi A.
    ;
    Pelliccione, Patrizio
    ;
    Perini, Anna
    ;
    Qureshi, Nauman A.
    ;
    Rumpe, Bernhard
    ;
    ;
    Trollmann, Frank
    ;
    Villegas, Norha M.
    A self-adaptive software system modifies its behavior at runtime in response to changes within the system or in its execution environment. The fulfillment of the system requirements needs to be guaranteed even in the presence of adverse conditions and adaptations. Thus, a key challenge for self-adaptive software systems is assurance. Traditionally, confidence in the correctness of a system is gained through a variety of activities and processes performed at development time, such as design analysis and testing. In the presence of self-adaptation, however, some of the assurance tasks may need to be performed at runtime. This need calls for the development of techniques that enable continuous assurance throughout the software life cycle. Fundamental to the development of runtime assurance techniques is research into the use of models at runtime (M@RT). This chapter explores the state of the art for using M@RT to address the assurance of self-adaptive software systems. It defines what information can be captured by M@RT, specifically for the purpose of assurance, and puts this definition into the context of existing work. We then outline key research challenges for assurance at runtime and characterize assurance methods. The chapter concludes with an exploration of selected application areas where M@RT could provide significant benefits beyond existing assurance techniques for adaptive systems.
  • Publication
    Towards trust assurance and certification in cyber-physical systems
    ( 2014) ;
    Armengaud, Eric
    ;
    Schoitsch, Erwin
    We are currently witnessing a 3rd industrial revolution, driven by ever more interconnected distributed systems of systems, running under the umbrella term of cyber-physical systems (CPS). In the context of this paradigm, different types of computer-based systems from different application domains collaborate with each other in order to render higher level services that could not be rendered by single systems alone. However, the tremendous potential of CPS is inhibited due to significant engineering challenges with respect to the systems safety and security. Traditional methodologies are not applicable to CPS without further ado and new solutions are therefore required. In this paper, we present potential solution ideas that are currently investigated by the European EMC² research project.
  • Publication
    Safety assurance of open adaptive systems - a survey
    Open adaptive systems are the basis for a promising new generation of embedded systems with huge economic potential. In many application domains, however, the systems are safety-critical and an appropriate safety assurance approach is still missing. In recent years, models at runtime have emerged as a promising way to systematically engineer adaptive systems. This approach seems to provide the indispensable leverage for applying safety assurance techniques in adaptive systems. Therefore, this survey analyzes the state-of-the-art of models at runtime from a safety engineering point of view in order to assess the potential of this approach and to identify open gaps that have to be closed in future research to yield a safety assurance approach for open adaptive systems.
  • Publication
    A safety roadmap to cyber-physical systems
    In recent years, the term cyber-physical systems has emerged to characterize a new generation of embedded systems. In cyber-physical systems, embedded systems will be open in the sense that they will dynamically interconnect with other systems and will be able to dynamically adapt to changing runtime contexts. Such open adaptive systems provide a huge potential for society and for the economy. On the other hand, however, openness and adaptivity make it hard or even impossible for developers to predict a system's dynamic structure and behavior. This impedes the assurance of important system quality properties, especially safety and reliability. Safety assurance of cyber-physical systems will therefore be both one of the most urgent and one of the most challenging research questions of the next decade. This chapter analyzes the state of the art in order to identify open gaps and suggests a runtime safety assurance framework for cyber-physical systems to structure ongoing and future research activities.