Formal Verification of a Space System's User Interface with the IVY workbench

J.C. Campos, M. Sousa, M. Alves and M.D. Harrison
IEEE Transactions on Human-Machine Systems, 46(2):303-316. 2016.

Abstract

This paper describes the application of the IVY workbench to the formal analysis of a user interface for a safety-critical aerospace system. The operation manual of the system was used as a requirement document, and this made it possible to build a reference model of the user interface, focusing on navigation between displays, the information provided by each display, and how they are interrelated. Usability-related property specification patterns were then used to derive relevant properties for verification. This paper discusses both the modeling strategy and the analytical results found using the IVY workbench. The purpose of the reference model is to provide a standard against which future versions of the interface may be assessed.

  visit publisher download PDF

@article{CamposSAH:2016,
 author = {J.C. Campos and M. Sousa and M. Alves and M.D. Harrison},
 title = {Formal Verification of a Space System's User Interface with the IVY workbench},
 journal = {IEEE Transactions on Human-Machine Systems},
 doi = {10.1109/THMS.2015.2421511},
 volume = {46},
 number = {2},
 paperurl = {http://haslab.uminho.pt/jccampos/files/thms-paper-author_version.pdf},
 year = {2016},
 pages = {303-316},
 abstract = {This paper describes the application of the IVY workbench to the formal analysis of a user interface for a safety-critical aerospace system. The operation manual of the system was used as a requirement document, and this made it possible to build a reference model of the user interface, focusing on navigation between displays, the information provided by each display, and how they are interrelated. Usability-related property specification patterns were then used to derive relevant properties for verification. This paper discusses both the modeling strategy and the analytical results found using the IVY workbench. The purpose of the reference model is to provide a standard against which future versions of the interface may be assessed.}
}

Generated by mkBiblio 2.6.11