MES Summer School

Welcome and introduction round

• Participant experience and expectations
• Introduction to the class

Overview: Model-based software development with Simulink

• Foundations of model-based development
• Overview of development and quality assurance activities
• Characteristics of ISO 26262-compliant development

Introduction to sample application

• Set up modeling environment
• Introduction to sample models

Principles of requirements management

• Definitions and classification in the model-based development process
• Requirement types and attributes
• Requirement specifications vs. functional specifications
• Hierarchy of specifications and requirements

Writing good requirements

• Determination of system under development
• Structuring specifications
• Features of “good” requirements
• Types of requirement patterns
• Requirements traceability

Hands-on: Writing requirements

• Creating requirements
• Peer review of stated requirements

Modeling embedded software in Simulink

• Simulink modeling environment
• Composition and structure of environment and controller models
• Parametrization of Simulink models
• Continuous and discrete modeling

Hands-on: Simulink

• Creating a Simulink model

Safety-related software development in compliance with ISO 26262

• Impact on the development process
• Hazard analysis and risk assessment, ASIL determination
• Strategies for safety concepts – deriving software safety requirements
• ASIL decomposition
• Safety Of The Intended Functionality (SOTIF)

Hands-on: Safety requirements

Modeling embedded software with Stateflow

• Introduction to the concept of finite-state machines
• Stateflow modeling environment
• Stateflow design patterns
• Recommended best practices

Hands-on: Stateflow

• Creating a Stateflow chart

Implementing software architectures in models

• Basics of software architecture
• Expected properties of an ISO 26262-compliant software architecture
• Software architecture in models
• Principles for layered models
• Interface handling in models
• Simulink design patterns for safety-critical software

Analysis and evaluation of model architecture

• Model structure analysis
• Introduction to complexity metrics
• Calculating model complexity
• Measures to reduce model complexity
• Identification of ineffective interfaces and model clones

Hands-on: Analysis, evaluation and refactoring of model architecture

Refactoring Simulink models and their structures

• Modeling styles facilitating refactoring
• Basic refactoring operations for Simulink and Stateflow
• Complex refactoring operations

Hands-on: Model refactoring with MoRe

Un:School

ISO 26262-compliant development process

• Reference workflow
• Process phases and work products
• Process manuals and developer guides
• Similarities to ASPICE 3 requirements

Integrating models and distributed modeling

• Advantages of model referencing and libraries
• Definition of distributed parameter files

Ensuring model quality with modeling guidelines

• Overview of modeling guidelines
• General modeling guidelines for MISRA- and ISO 26262-compliant modeling
• Specific guidelines on improving code generator application
• Automatic checking of modeling guidelines

Hands-on: Ensuring model quality with modeling guidelines

Ensuring model quality with model testing

• ISO 26262 requirements in the testing process
• Test goals on different testing levels
• Regression testing and back-to-back testing, MiL – SiL – PiL
• Automatic test evaluation with test assessments

Systematic requirements-based test case creation

• Test cases: What are the typical basic elements?
• Definition of test groups and test sequences
• Specification functions and parameter handling
• Best practices for test specifications

Hands-on: Scripting of test cases with MTest

• Creating test sequences
• Executing test sequences
• Using parameters for efficient modification of test sequences

Automated test evaluation with test assessments

• Principles and objectives of test assessments
• Assessment generation from requirements (MARS)
• Benefits of formal requirements syntax

Hands-on: Formal requirements with MTest

• Creating typical formal requirements
• Generating and executing test assessments
• Workflow with generated assessments

Regression and back-to-back signal comparison

• Scope (MiL – SiL – PiL)
• Combination of back-to-back and regression testing

Hands-on: Signal comparison with MTest

• Configuring and executing a test evaluation
• Definition of tolerances
• Documenting test evaluation results in reports and catalogs
• Converting output signals into reference signals

Un:School

Code generation via TargetLink/Embedded Coder development environment

• Principles of code generation
• Data dictionary
• Data types, classes, scaling, and fixed-point arithmetic
• Interfaces (signals and buses)

Tool qualification in compliance with ISO 26262

• Foundations of tool qualification
• Determination of the tool confidence level
• Qualification methods
• Hands-on: Tool qualification kit

History of model-based development and future challenges