MES Summer School / 5-Day Training Class on Introduction to Model-Based Development


Date: available upon request
Language: English

Model-based development of embedded systems is a mature technology to create technical software applications with high quality and efficiency. The MES Summer School/5-Day Training Class on “Introduction to Model-based Software Development of Embedded Systems” gives a comprehensive introduction to this technology applied in the automotive and automation industry, among others. Starting from elicitation and management of requirements through to definition of architectures and the design of a model structure, the program provides an introduction to modeling. Particular attention will be paid to static and dynamic quality assurance methods to ensure that models from which high-quality software is sourced are suitable for safety-critical systems. By applying all relevant process steps during our handson sessions, you will face all the typical challenges of modeling safety-critical systems. This will prepare you for the application of relevant process steps to your own projects. The small training group allowing individual supervision, the experienced training team, and a relaxed atmosphere will enable you to learn all that is necessary for safeguarding your safety-critical embedded software. To complete the picture, we will present recommendations of applicable standards in the field such as IEC 61508, ISO 26262, and ASPICE®. The MES Summer School/5-Day Training Class provides an easy entry to and a comprehensive overview of model-based development of embedded systems that is relevant to everybody. You will learn to make use of all steps in practical exercises using the MES Test Manager® (MTest), MES Model Examiner® (MXAM), MES M-XRAY® (MXRAY), and MES Quality Commander® (MQC).

Jakub Mazur,
Edscha Engineering GmbH

"If you’re looking for the best training on model-based software development and software quality, you don’t need to look further.”

Jürgen Borst,
Huber Automotive AG

"A high-graded overview of all processes needed for software development in safety-relevant software projects.”

Nick Broyles,
Bendix Commercial Vehicle Systems LLC

"The training class provided exactly the overview I wanted for my team on the ISO 26262 process and the best practices for integrating model-based development into that process.”

Oscar Hernandez,
Stoneridge, Inc.

"Those who took part in the U.S. course now have the knowledge and tools to determine the next steps to successfully deploy model-based development in their own workplace.”

MES Summer School / 5-Day Training Class agenda

Target audience

This training class is designed for developers, testers, project managers, and team leaders, whose focus is model-based development of safety-critical embedded software using MATLAB®/Simulink® in combination with Embedded Coder® or dSPACE TargetLink®. Only basic modeling knowledge with Simulink® and Stateflow® is assumed.

Conditions of Participation and Cost

Available as an in-house training class worldwide on request.
For company-specific adaptations to the agenda, quotations, or questions, please do not hesitate to contact us via


  • Introduction to model-based development of embedded software in line with Simulink® tool chains
  • Comprehensive development process, including requirements elicitation, architectural design, function development, and implementation, as well as target integration
  • Full coverage of quality assurance activities required for safety-critical systems
  • Hands-on experience with real-world models and tools
  • Alignment with relevant standards, i.e. ISO 26262 (functional safety), ISO 250XX (SW product quality), and ASPICE®


AGENDA - Day 1

DE: 10 a.m.
U.S.: 9 a.m.
Welcome and introduction round
  • Participant experience and expectations
  • Introduction to the class
  • Overview: Model-based software development with Simulink®
  • Foundations of model-based development
  • Overview of development and quality assurance activities
  • Characteristics of ISO 26262-compliant development
  • Introduction to sample application
  • Set up modeling environment
  • Introduction to sample models
  • Principles of requirements management
  • Definitions and classification in the model-based development process
  • Requirements types and attributes
  • Requirement specifications vs. functional specifications
  • Hierarchy of specifications and requirements
  • Lunch
    Writing good requirements
  • Determination of system under development
  • Structuring specifications
  • Features of “good” requirements
  • Types of requirements pattern
  • Requirements traceability
  • Hands-on: Writing requirements
  • Creation of requirements
  • Peer review of stated requirements
  • Coffee break
    Modeling embedded software in Simulink®
  • Simulink® modeling environment
  • Composition and structure of environment and controller models
  • Parametrization of Simulink® models
  • Continuous and discrete modeling
  • Hands-on: Simulink®
  • Creating a Simulink® model
  • DE: 6 p.m.
    U.S.: 5 p.m.
    End of day

    AGENDA - Day 2

    DE: 8:30 a.m.
    U.S.: 9 a.m.
    Safety-related software development in compliance with ISO 26262
  • Impact on the development process
  • Hazard analysis and risk assessment, ASIL determination
  • Strategies for safety concepts
  • ASIL decomposition
  • Coffee break
    Modeling embedded software with Stateflow®
  • Introduction to the concept of finite-state machines
  • Stateflow® modeling environment
  • Stateflow® design patterns
  • Recommended best practices
  • Hands-on: Stateflow®
  • Creating a Stateflow® chart
  • Lunch
    Software architecture according to ISO 26262
  • Basics of software architecture
  • Expected properties of an ISO 26262-compliant software architecture
  • Principles of software unit design
  • Implementing software architectures in models
  • Software architecture in models
  • Principles for layered models
  • Interface handling in models
  • Simulink® design patterns for safety-critical software
  • Coffee break
    Analysis and evaluation of model structure
  • Introduction to complexity metrics
  • Calculating model complexity
  • Countermeasures to overly complex models
  • Assessing coherence in models
  • Software architecture and model structure of the sample application
  • Hands-on: Model architecture analysis with MES MXRAY
  • Analyzing model structure
  • Detecting complex subsystems, ineffective interfaces, and cloned subsystems
  • Un:School
    DE: 6 p.m.
    U.S.: 5 p.m.
    End of day

    AGENDA - Day 3

    DE: 8:30 a.m.
    U.S.: 9 a.m.
    Model-based development process in line with ISO 26262
  • Reference workflow
  • Process phases and work products
  • Process manuals and developer guides
  • Integrating models and distributed modeling
  • Advantages of model referencing and libraries
  • Definition of distributed parameter files
  • Coffee break
    Ensuring model quality with modeling guidelines
  • Overview of modeling guidelines
  • Modeling guidelines for ISO 26262-compliant modeling
  • Automatic checks of modeling guidelines with MXAM
  • Hands-on: Modeling guidelines with MXAM
  • Performing analyses with MXAM
  • Evaluation and discussion of specific guideline violations
  • Repairing or justifying guideline violations
  • Lunch
    Ensuring model quality with model testing
  • ISO 26262 requirements in the testing process
  • Test goals on different testing levels
  • Safeguarding functional properties of model and code
  • Regression testing and back-to-back testing, MiL – SiL – PiL
  • Automatic test evaluation with test assessments
  • Systematic requirements-based test case creation
  • Test cases: What are the typical basic elements?
  • Definition of test groups and test sequences with MTCD
  • Specification functions in MTCD (functions, synchronous, asynchronous)
  • Parameter handling with MTCD
  • Best practices for test specifications
  • Coffee break
    Hands-on: MTCD with MTest
  • Creating test sequences
  • Executing test sequences
  • Using parameters for efficient modification of test sequences
  • DE: 6 p.m.
    U.S.: 5 p.m.
    End of day

    AGENDA - Day 4

    DE: 8:30 a.m.
    U.S.: 9 a.m.
    Automated test evaluation with test assessments
  • Principles and objectives of test assessments
  • Assessment generation from requirements (MARS)
  • Benefits of formal requirements syntax
  • Hands-on: MARS with MTest
  • Creating typical formal requirements
  • Generating and executing test assessments
  • Workflow with generated assessments
  • Coffee break
    Code generation via TargetLink®/Embedded Coder® development environment
  • Principles of code generation
  • Data Dictionary
  • Data types, classes, scaling, and fixed-point arithmetic
  • Interfaces (signals and buses)
  • Un:School
    Regression and back-to-back signal comparison
  • Scope (MiL vs. SiL vs. PiL, model simulation vs. measurement data)
  • Combination of back-to-back and regression testing with test assessments
  • Hands-on: Signal comparison with MTest
  • Configuring and executing a test evaluation
  • Definition of tolerances
  • Documenting of test evaluation results in report and catalog
  • Conversion of output signals into reference signals
  • Coffee break
    Tool qualification in compliance with ISO 26262
  • Foundations of tool qualification
  • Determining the tool confidence level
  • Qualification methods
  • History and future challenges to model-based development
    DE: 5 p.m.
    U.S.: 5 p.m.
    End of day

    AGENDA - Day 5

    DE: 9 a.m.
    U.S.: 9 a.m.
    Model and code coverage in the model test
  • Model coverage for all MiL test platforms
  • Code coverage for SiL/PiL test platforms
  • Hands-on: Increasing model/code coverage with MTest
  • Interpretation and evaluation of coverage reports
  • Increasing model/code coverage through structure-based test cases
  • Coffee break
    Overview of results and progress of quality assurance
  • Are requirements correctly implemented in the test object?
  • When is development and quality assurance done?
  • Hands-on: Maintaining quality with MQC
  • Assessing the quality of the test objects (test catalog, test report)
  • Efficient workflow in case of modified requirements
  • Overview of development and project quality
  • Lunch
    Detailed design in model-based development in compliance with ASPICE 3
  • Relevance of ASPICE for automotive software development
  • Requirements for compliance with ASPICE 3
  • Demonstration of base practices of detailed design in model-based development
  • Summary and overall assessment of achievements during the MES 5-Day Training Class
    Evaluation exercise to qualify for the SAE Certificate of Competency (optional)
    Feedback and closing of the event
    Coffee break
    DE: 4 p.m.
    U.S.: 5 p.m.
    End of day