Automated driving is a promising tool for reducing traffic accidents. While some companies claim that many cutting-edge automated functions have been developed, how to evaluate the safety of vehicles remains an open question, which has become crucial bottleneck. Scenario-based testing introduced test vehicles, and much progress achieved. data-driven knowledge-based approaches are hot research t...

Autonomous driving systems have witnessed significant development during the past years thanks to advance in machine learning-enabled sensing and decision-making algorithms. One critical challenge for their massive deployment real world is safety evaluation. Most existing are still trained evaluated on naturalistic scenarios collected from daily life or heuristically-generated adversarial ones....

Code generation is a technique for automatically generating implementations from formal specifications. In this paper we describe automatic generation of programs in the objectoriented programming language C++ from formal specifications written in LOTOS. We present its theoretical foundation and report on our experience in implementing a support toolset. A key feature of our tool development is...

Mastering the complexity of programs and systems, particularly distributed systems, should lead to signi cant improvements in program and system understanding. In this paper we present a formal approach for (distributed) software understanding based on abstraction hierarchies represented by architectural design patterns. This approach allows us to model the distributed software applications thr...

In most cases, it is simple inconvenience of use that keeps formal methods from being put to industrial use. This paper argues that functionalities, even though of simple formal principles, can be decisive for the applicability of such a formal development tool. Several of those functionalities, as found in the AUTOFOCUS tool prototype, like integrated graphical and hierarchical description tec...

This paper introduces describes how to integrate standard editing and code generation functionalities offered by most tools supporting the IEC standard 1131-3 with capabilities for modelling and simulating the plant and its interactions with the digital controller. The 1131-3 notations (in particular Functional Block Diagrams) are complemented with differential equations that describe the behav...