MES Summer School

5-Day Training Class on Introduction to Model-Based Software Development


Date Location
Nov 16–20, 2020 Berlin, Germany (Michelberger Hotel)


Model-based development of embedded systems is a mature technology used to create technical software applications with high quality and efficiency. The MES Summer School is a 5-day training class on “Introduction to Model-based Software Development of Embedded Systems.” It gives a comprehensive introduction to this technology applied in the automotive and automation industry, among others. Starting from the elicitation and management of requirements through to the definition of architectures and the design of a model structure, the program provides an introduction to modeling. Particular attention will be paid to static and dynamic quality assurance methods to ensure that models from which high-quality software is sourced are suitable for safety-critical systems. By applying all relevant process steps during our hands-on sessions, you will face all the typical challenges of modeling safety-critical systems. This will prepare you for the application of relevant process steps to your own projects. The small training group size allowing individual supervision, the experienced training team, and a relaxed atmosphere will enable you to learn all that is necessary for safeguarding your safety-critical embedded software. To complete the picture, we will present recommendations of applicable standards in the field such as IEC 61508, ISO 26262, and ASPICE. The MES Summer School provides an easy entry to and a comprehensive overview of model-based development of embedded systems. You will learn to make use of all steps in practical exercises using the MES Test Manager (MTest), MES Model Examiner (MXAM), MES Model & Refactor (MoRe), and MES Quality Commander (MQC).

The All-Inclusive Course

  • Five days of introduction and overview on MBD including hands-on
  • Training materials
  • SAE Certificate of Competency (optional)
  • Lunch and refreshments included
  • Special location in lively Berlin
  • Leisure program and 2x dinner included: Get to know the city of Berlin!
  • Accommodation and breakfast in the stylish Michelberger Hotel (optional)

Target Audience

This training class is targeted at beginners to model-based development, including developers, testers, quality managers, project managers, and team leaders. The focus is on model-based development of safety-critical embedded software using MATLAB/Simulink in combination with Embedded Coder or dSPACE TargetLink. Only basic modeling knowledge with Simulink and Stateflow is required.


  • Introduction to model-based development of embedded software in line with Simulink toolchains
  • Comprehensive development process, including requirements elicitation, architectural design, function development, and implementation, as well as target integration
  • Full coverage of quality assurance activities required for safety-critical systems: Modeling guidelines, model testing, test implementation techniques, and more
  • Hands-on experience with real-world models and tools
  • Alignment with relevant standards, especially ISO 26262 (functional safety), and ASPICE

Jakub Mazur,
Edscha Engineering GmbH

"If you’re looking for the best training on model-based software development and software quality, you don’t need to look any further.”

Alexander Boll,
Humboldt-Universität zu Berlin

"A comprehensive introduction to ISO 26262 from abstract understanding to hands-on exercises in a great atmosphere.”

Nick Broyles,
Bendix Commercial Vehicle Systems LLC

"The training class provided exactly the overview I wanted for my team on the ISO 26262 process and the best practices for integrating model-based development into that process.”

Christoph Kerschner,
Engineering Center Steyr (Magna Powertrain)

"At the MES Summer School, you don’t only get to know model-based development presented by welcoming and experienced instructors, but also the exciting city of Berlin.”

Impressions of the MES Summer School 2019

Sun, great location, motivated participants - despite the scorching temperatures during the heatwave, we learnt a lot together and enjoyed the leisure program!

Fees, Terms & Conditions

SAE Certificate of Competency

A fee-based SAE Certificate of Competency can be obtained in this class by passing the evaluation test.

Leisure Program

We will organize a leisure program on three evenings for the participants of the MES Summer School. As part of the leisure program, we will spend an evening getting to know the neighborhood, enjoy two dinners at renowned eateries, and visit the Berlin TV Tower. An authentic Berlin experience!


We recommend to stay in the hotel where the training class will take place – the Michelberger Hotel. Michelberger Hotel is not just any hotel; it is an exceptional location bursting with creativity right in the heart of Berlin’s hip Friedrichshain-Kreuzberg district. The price for one single room including breakfast is € 126 plus VAT per night. When registering, please let us know if you will arrive on Sunday, November 15, 2020 (5 nights stay) or on Monday, November, 16, 2020 (4 nights stay). We will be happy booking a room for you.


Agenda - Day 1

10 a.m. Welcome and introduction round
  • Participant experience and expectations
  • Introduction to the class
  • 10:30 a.m. Overview: Model-based software development with Simulink
  • Foundations of model-based development
  • Overview of development and quality assurance activities
  • Characteristics of ISO 26262-compliant development
  • 11:15 a.m. Introduction to sample application
  • Set up modeling environment
  • Introduction to sample models
  • 11:30 a.m. Principles of requirements management
  • Definitions and classification in the model-based development process
  • Requirements types and attributes
  • Requirement specifications vs. functional specifications
  • Hierarchy of specifications and requirements
  • 12:15 p.m. Lunch break and open dialog
    1:45 p.m. Writing good requirements
  • Determination of system under development
  • Structuring specifications
  • Features of “good” requirements
  • Types of requirements patterns
  • Requirements traceability

  • Hands-on: Writing requirements
  • Creation of requirements
  • Peer review of stated requirements
  • 3:15 p.m. Short break
    3:30 p.m. Modeling embedded software in Simulink
  • Simulink modeling environment
  • Composition and structure of environment and controller models
  • Parametrization of Simulink models
  • Continuous and discrete modeling

  • Hands-on: Simulink
  • Creating a Simulink model
  • 5:30 p.m. End of training class day 1
    Leisure program in the evening

    Agenda - Day 2

    8:30 a.m. Safety-related software development in compliance with ISO 26262
  • Impact on the development process
  • Hazard analysis and risk assessment, ASIL determination
  • Strategies for safety concepts
  • ASIL decomposition
  • Safety Of The Intended Functionality (SOTIF)
  • 10 a.m. Short break
    10:30 a.m. Modeling embedded software with Stateflow
  • Introduction to the concept of finite-state machines
  • Stateflow modeling environment
  • Stateflow design patterns
  • Recommended best practices

  • Hands-on: Stateflow
  • Creating a Stateflow chart
  • 12:30 p.m. Lunch break and open dialog
    2 p.m. Software architecture according to ISO 26262
  • Basics of software architecture
  • Expected properties of an ISO 26262-compliant software architecture
  • Layered application architectures
  • 3 p.m. Implementing software architectures in models
  • Software architecture in models
  • Principles for layered models
  • Interface handling in models
  • Simulink design patterns for safety-critical software
  • 3:45 p.m. Short break
    4 p.m. Analysis and evaluation of model structure
  • Introduction to complexity metrics
  • Calculating model complexity
  • Countermeasures to overly complex models
  • Assessing coherence in models
  • Software architecture and model structure

  • Hands-on: Model architecture analysis
  • Analyzing model structure
  • Detecting complex subsystems, ineffective interfaces, and cloned subsystems
  • Determining structural and functional subsystems
  • 5 p.m. Refactoring Simulink models and their structures
  • Modeling styles facilitating refactoring
  • Basic refactoring operations for Simulink and Stateflow
  • Complex refactoring operations

  • Hands-on: Model refactoring with MoRe
    5:30 p.m. Un:School
    6 p.m. End of training class day 2
    Leisure program in the evening

    Agenda - Day 3

    8:30 a.m. Model-based development process in line with ISO 26262
  • Reference workflow
  • Process phases and work products
  • Process manuals and developer guides
  • 9:15 a.m. Integrating models and distributed modeling
  • Advantages of model referencing and libraries
  • Definition of distributed parameter files
  • 10 a.m. Short break
    10:30 a.m. Ensuring model quality with modeling guidelines
  • Overview of modeling guidelines
  • Modeling guidelines for ISO 26262-compliant modeling
  • Automatic checks of modeling guidelines with MXAM

  • Hands-on: Modeling guidelines with MXAM
  • Performing analyses with MXAM
  • Evaluation and discussion of specific guideline violations
  • Repairing or justifying guideline violations
  • 12:15 p.m. Lunch break and open dialog
    1:45 p.m. Ensuring model quality with model testing
  • ISO 26262 requirements in the testing process
  • Safeguarding functional properties of model and code
  • Regression testing and back-to-back testing, MiL – SiL – PiL
  • Automatic test evaluation with test assessments
  • 3 p.m. Systematic requirements-based test case creation
  • Test cases: What are the typical basic elements?
  • Definition of test groups and test sequences
  • Specification functions and parameter handling
  • Best practices for test specifications

  • Hands-on: Scripting of test cases with MTest
  • Creating test sequences
  • Executing test sequences
  • Using parameters for efficient modification of test sequences
  • 5:30 p.m. End of training class day 3

    Agenda - Day 4

    8:30 a.m. Automated test evaluation with test assessments
  • Principles and objectives of test assessments
  • Assessment generation from requirements (MARS)
  • Benefits of formal requirements syntax

  • Hands-on: Formal requirements with MTest
  • Creating typical formal requirements
  • Generating and executing test assessments
  • Workflow with generated assessments
  • 10 a.m. Short break
    10:30 a.m. Regression and back-to-back signal comparison
  • Scope (MiL – SiL – PiL)
  • Combination of back-to-back and regression testing

  • Hands-on: Signal comparison with MTest
  • Configuring and executing a test evaluation
  • Definition of tolerances
  • Documenting of test evaluation results in report and catalogs
  • Converting output signals into reference signals
  • 11:30 a.m. Un:School
    12:15 p.m. Lunch break and open dialog
    2 p.m. Code generation via TargetLink/Embedded Coder development environment
  • Principles of code generation
  • Data dictionary
  • Data types, classes, scaling, and fixed-point arithmetic
  • Interfaces (signals and buses)
  • 3 p.m. Short break
    3:15 p.m. Tool qualification in compliance with ISO 26262
  • Foundations of tool qualification
  • Determining the tool confidence level
  • Qualification methods
  • 4 p.m. History of model-based development and future challenges
    5 p.m. End of training class day 4
    Leisure program in the evening

    Agenda - Day 5

    9 a.m. Model and code coverage in the model test
  • Model coverage for all MiL test platforms
  • Code coverage for SiL/PiL test platforms

  • Hands-on: Increasing model/code coverage with MTest
  • Interpretation and evaluation of coverage reports
  • Increasing model/code coverage through structure-based test cases
  • 10a.m. Short break
    10:30 a.m. Detailed design in model-based development in compliance with ASPICE 3
  • Relevance of ASPICE for automotive software development
  • Requirements for compliance with ASPICE 3
  • Demonstration of base practices of detailed design
  • Principles of software unit design
  • 12:15 a.m. Lunch break and open dialog
    1:45 a.m. Overview of results and progress of quality assurance
  • Are requirements correctly implemented in the test object?
  • When is development and quality assurance done?

  • Hands-on: Maintaining quality with MQC
  • Assessing the quality of the test objects
  • Efficient workflow in case of modified requirements
  • Overview of development and project quality
  • 2:15 p.m. Summary and overall assessment of achievements during the MES Summer School
    2:45 p.m. Evaluation test to qualify for the SAE Certificate of Competency (optional)
    3:15 p.m. Wrap up of the event
    4 p.m. End of day