How do we make sense of modeling and model analysis? Oleg Sokolsky Department of Computer and Information Science University of Pennsylvania Workshop on Aviation Software Systems: Design for Certifiably Dependable Systems October 5-6, 2006

Model-driven development Model-driven design holds much promise for improving the design cycle for high-confidence systems Model analysis and generative methodologies are only as good as models are Informal world: Concepts and artifacts formalization model extraction Formal world: hierarchical heterogeneous models V&V code, test generation

What do we model and how? Large models, just like large systems, will be developed by different teams and later integrated –Conflicting assumptions in separate modeling efforts are possible Informal world: Concepts and artifacts formalization model extraction Formal world: hierarchical heterogeneous models V&V code, test generation

Consistency of modeling assumptions Consistency of formalization and abstraction may be ensured by a high-level model that captures and documents assumptions for the detailed model –“conceptual architecture of the system Informal world: Concepts and artifacts formalization model extraction Formal world: hierarchical heterogeneous models conceptual architecture