Browse Prior Art Database

Safety-critical software testing in airborne systems the modified condition/decision coverage criterion

IP.com Disclosure Number: IPCOM000128128D
Original Publication Date: 1999-Dec-31
Included in the Prior Art Database: 2005-Sep-15
Document File: 5 page(s) / 18K

Publishing Venue

Software Patent Institute

Related People

Dupuy, Arnaud: AUTHOR [+3]

Related Documents

http://theses.mit.edu:80/Dienst/UI/2.0/Describe/0018.mit.theses/1999-80: URL

Abstract

In order to be certified by the FAA, airborne software must comply with the D0-178B standard. For the unit testing of safety-critical software, this standard requires the testing process to meet a strong source code structure coverage criterion, referred to as Modified Condition /Decision Coverage criterion. This part of the standard is controversial in the aviation community, in particular because the coverage criterion is apparently not related to the safety of the software. In this thesis, we follow the letter of the DO-178B standard to perform the unit testing of the Attitude Control System of the HETE-2 satellite. This allowed us to gain some insights on the DO178B testing procedure, and to prove that in the case of the considered software, this method was well adapted.

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 39% of the total text.

Page 1 of 5

 This record is the front matter from a document that appears on a server at MIT and is used through permission from MIT. See http://theses.mit.edu:80/Dienst/UI/2.0/Describe/0018.mit.theses/1999-80 for copyright details and for the full document in image form.

Safety-Critical Software Testing in Airborne Systems The Modified Condition/ Decision Coverage Criterion

by

Arnaud Dupuy
Submitted in partial fulfillment of the requirements for the degree of Master of Science at the Massachusetts Institute of Technology May 1999
SIGNATURE OF author: [[signature omitted]]

Department of Aeronautics Astronautics

May 7 1999
CERTIFIED BY: [[SIGNATURE OMITTED]]

Nancy G. Leveson Professor of Aeronautics and Astronautics Thesis Supervisor ACCEPTED BY: [[SIGNATURE OMITTED]]

Jaime Peraire Chairman, Department Committee on Graduate Students ARCHIVES MASSACHUSETTS INSTITUTE OF TECHNOLOGY LIBRARIES JUL 15 1999

Massachusetts Institute of Technology Page 1 Dec 31, 1999

Page 2 of 5

Safety-critical software testing in airborne systems the modified condition/decision coverage criterion

Safety-Critical Software Testing ire Airborne Systems The Modiffied Condition/Docision Coverage Criterion

by

Arnaud Dupuy

Submitted to the Department of Aeronautics and Astronautics on May 7, 1999, in partial fulfillment of the requirements for the degree of Master of Science

Abstract

In order to be certified by the FAA, airborne software must comply with the D0-178B standard. For the unit testing of safety-critical software, this standard requires the testing process to meet a strong source code structure coverage criterion, referred to as Modified Condition /Decision Coverage criterion. This part of the standard is controversial in the aviation community, in particular because the coverage criterion is apparently not related to the safety of the software. In this thesis, we follow the letter of the DO-178B standard to perform the unit testing of the Attitude Control System of the HETE-2 satellite. This allowed us to gain some insights on the DO178B testing procedure, and to prove that in the case of the considered software, this method was well adapted.

Thesis Supervisor: Nancy G. Leveson Title: Professor of Aeronautics and Astronautics

[2]

Acknowledgments

I would like to thank the many people who helped me to complete this project:

My advisor, Pr. Nancy Leveson, for suggesting the subject of this thesis, which allowed me to explore a very exciting field of software engineering, and at the same time do some useful work for the HETE project. Thank you also for giving me the freedom and the support to pursue my own idem.

Dr. George Ricker, for offering me the opportunity to work on the HETE project, and Dr. Francois Martel thanks to whom I arr~ at MIT today.

The HETE team for always being great to work with. The help of Geoff Crew, Jim Francis and Greg Huffman has been decisive for the practical part of this thesis. I am very grateful to Bob Dill for reading my thesis, making p...