Pratt & Whitney National Workshop on Aviation Software Systems for the Second Century of Flight: Design for Certifiably Dependable Systems October 5-6, 2006 Scott Beecher & Jim Krodel Certification by Composition?

Pratt & Whitney Design for Certifiably Dependable Systems 2 The Need To Support Certification Aspects of System Development Increased Complexity in Aviation Based Systems Certification Processes are Currently Insufficient Research on Highly Integrated Systems (HIS) Certification Techniques –Trusted Tool Suites –System Composition for Certification Assurance Certification Processes

Pratt & Whitney Design for Certifiably Dependable Systems 3 Certification Process of assessment for acceptability of a system A predominate attribute – Safety Current Safety practices –Hazard analysis, fault tree analysis, failure mode accommodations Challenges Certifying Highly Integrated Systems (HIS) –Development pedigree; Insufficient Process and Methods –Multiple Integrated H/W S/W and Complex Electronics Modules; Networked Architectures –Techniques that are provable to regulatory authorities –Regulatory authority acceptance of those techniques

Pratt & Whitney Design for Certifiably Dependable Systems 4 Challenges Using modules within certifiable HIS –Assuring the commitments / contracts Assess the module’s certification aspects in the ‘integrated’ state Certification Needs: –Traceability and authenticating commitments (the contract) –Understanding acceptable responses to components that break their contract –Reliance on tool suites with these highly integrated systems must be studied –Safety assessment process impacts System re-assessment with systems that grow their components/ features/ functions Possible approach: Incremental Cert. Approval Process

Pratt & Whitney Design for Certifiably Dependable Systems 5 Roadmap Changes to certification processes are lethargic –Domains with successful regulatory practices are slow to change –Large complex systems are straining certification effectiveness –Certification approaches must evolve or become a roadblock to these highly integrated technologies One approach - Establish tool suites that allow: –Building Complex Systems Incrementally –Building In Reliable/Certifiable Results –Tools Built Around Managing Component Contracts –Tool Pedigree Providing High Confidence Individual components & integrated in a system. Needed Research… –Tools that support Certification of HIS –Processes for development of ‘trusted tools’ –System Composition for Certification Assurance