In this paper, we briefly examine the recent developments in artificial pancreas controllers, that automate the delivery of insulin to patients with type-1 diabetes. We argue the need for offline and online runtime verification for these devices, and discuss challenges that make verification hard. Next, we examine a promising simulation-based falsification approach based on robustness semantics...

The strategic goal of this project is to improve the theoretical bases and corresponding tool support for the design languages and methodologies that are widely used for building avionics and aerospace systems. Existing languages, particularly the popular Stateflow statecharts, lack in expressiveness and tool support for refinement-based designs as practised by engineers. In particular, they ha...

S-TaLiRo is a Matlab toolbox that searches for falsifying trajectories of temporal logic properties of Simulink/Stateflow models. It can analyze arbitrary Simulink models or user defined functions that model the system. At the heart of the tool, we use randomized testing based on stochastic optimization techniques including Monte-Carlo methods and ant-colony optimization. Among the advantages o...

MAGNA STEYR has built up a full hybrid premium SUV with longitudinal powertrain, where the so called high modular model based hybrid control is implemented. This softand hardware control includes everything from driver input down to clutch and transmission control and back to driver display. The complete algorithm is the result of a new product development process of MAGNA STEYR. The complete c...

MATLAB/Simulink and its state machine design toolbox State ̄ow are widely-used industrial tools for the development of complex embedded systems. Due to the dynamic as well as heterogeneous nature of models that contain both Simulink and State ̄ow components, their analysis poses a dif®cult challenge. This paper outlines an approach to relate the semantics of both Simulink and State ̄ow and how to ...

Model-based software development frameworks such as Simulink/Stateflow support auto code generation. Due to the limitations of the implementation platform on which the generated code is deployed on, imprecision is introduced to the implementation and may lead to unpredictable behaviors in the implementation. In this paper, an implementation model is defined to model the imprecisions introduced ...

Die modellbasierte Entwicklung beginnt sich als Standardparadigma in der Steuergerätesoftwareentwicklung zu etablieren. Um die Wirksamkeit und Effizienz der modellbasierten Entwicklung zu erhöhen, sind Richtlinien für die Modellierung unerlässlich. Diese manuell zu überprüfen ist aufwändig und fehleranfällig. Das Projekt MATE (MATLAB Simulink/Stateflow Analysis and Transformation Environment) h...