1. M ODELLING AND A NALYZING BASED ON AADL OSATE VERSUS STOOD Farhana Rahman, Carleton University Yu Sun, University of Ottawa

2. O UTLINE  Introduction  Scenario & Background  Architecture Analysis & Design Language (AADL)  STOOD & OSATE  Experimental Design  Evaluation Criteria & Method  Test Cases  Comparison, Analysis & Solution  Conclusion

3. XYZ S OFTWARE S YSTEM I NC. o Established in 2010 o A mid-sized start-up company o Focus on the development of real-time embedded systems I NTRODUCTION time consuming & costly Figure 1. XYZ Software System Inc.

4. A RCHITECTURE A NALYSIS AND D ESIGN L ANGUAGE (AADL) I NTRODUCTION Figure 2. Architectural Model AADL, as an international industry standard, it supports multiple analyses from a single architectural model enables modeling and analysis throughout the life cycle provides analysis of runtime behavior such as availability, performance, and security.

5. AADL R EPRESENTATIONS Figure 4. AADL Representations [1] I NTRODUCTION

6. AADL C OMPONENTS Figure 5. AADL Components [1] I NTRODUCTION

7. C ANDIDATE T OOLS : OSATE & STOOD I NTRODUCTION  OSATE (Open-source AADL Tool Environment) [2]  Developed by Software Engineering Institute, Carnegie Mellon University  Eclipse based, full language, full AADL XMI support  Integrated text and graphical editing with TOPCASED  Analysis plug-ins Figure 6. OSATE Plug-In Development for AADL

8. C ANDIDATE T OOLS : OSATE & STOOD I NTRODUCTION  STOOD [3]  Commercial modelling tool developed by Ellidiss Software  AADL-related features  Legacy Ada and C code import  Industry standards compliance, including D0178B  Full UNIX/Windows interoperability  Provides state of the art real time software development offering UML 2.0 with full software modeling

9. E VALUATION C RITERIA E XPERIMENTAL D ESIGN Modelling Models Verification and Basic Analysis Essential / Critical Criteria Easiness of Use More Support on Model Analyzing Technical Support Important Criteria Code and Documents Generation Low Entry-cost Desired Criteria

10. E SSENTIAL / C RITICAL C RITERIA E XPERIMENTAL D ESIGN  Functional Features: Modelling  Strong support for both the AADL standard textual and graphical notations  Comply with the AADL syntax and semantics  Model import/export  Consistence between model and text  Functional Features: Models Verification and Basic Analysis  Ability of fault detecting at early deigned phase  Model statistic checking along with application

11. I MPORTANT C RITERIA E XPERIMENTAL D ESIGN  Easiness of Use  Installation and system requirement  Training Requirement  Interface  More Support on Model Analyzing  Schedulability analysis  Problem identification  Technical Support  Supporting documentation available, such as tutorials, examples, on-line help, etc.

12. D ESIRED C RITERIA E XPERIMENTAL D ESIGN  Code and Document Generation Essential code and document generated from the system model  Low Entry-cost / Pricing Lowest cost as possible

13. M ETHODOLOGY : NIH S CORING S YSTEM [4] E XPERIMENTAL D ESIGN

14. M ETHODOLOGY : S CORING S YSTEM E XPERIMENTAL D ESIGN CategoryNo.CriteriaPriority (P i )Score (S i ) Essential / Critical 0Modelling11 - 9 1Model Verification & Basic Analysis11 - 9 Important 2Easiness of Use21 - 9 3More Support on Model Analyzing21 - 9 4Technical Support21 - 9 Desired 5Code & Document Generation31 - 9 6Low Entry-cost31 - 9

15. M ETHODOLOGY : T EST C ASES E XPERIMENTAL D ESIGN  Speed Control System A simplification of an aeronautical, automotive, or other vehicle speed control system. It includes a speed sensor that provides data to a controller. The controller outputs a command to a throttle actuator.  Avionics System Models, SEI, Carnegie Mellon University [5] sensor data command data

16. C OMPARISON : M ODELLING (OSATE) Comparison, Analysis & Solution graphical design textual design property settings tool bar menu object model

17. C OMPARISON : M ODELLING (OSATE) Comparison, Analysis & Solution No specification alert

18. C OMPARISON : M ODELLING (STOOD) Comparison, Analysis & Solution graphical design textual design property settings tool bar menu

19. C OMPARISON : M ODELLING (STOOD) Comparison, Analysis & Solution graphical design textual design only available ports shown save changes

20. C OMPARISON : M ODELLING Comparison, Analysis & Solution OSATESTOOD Graphical & Textual Support Comply with AADL Syntax & Semantics Model import/export Consistency between model and text Automatically realize the consistency between the textual and graphical design  Cannot update the graphical design automatically after changing the text Mark24

21. C OMPARISON : M ODEL V ERIFICATION & B ASIC A NALYSIS (OSATE) Comparison, Analysis & Solution

22. C OMPARISON : M ODEL V ERIFICATION & B ASIC A NALYSIS (OSATE) Comparison, Analysis & Solution model statistics application statistics

23. C OMPARISON : M ODEL V ERIFICATION & B ASIC A NALYSIS (STOOD) Comparison, Analysis & Solution different checking rules

24. C OMPARISON : M ODEL V ERIFICATION & B ASIC A NALYSIS (STOOD) Comparison, Analysis & Solution

25. C OMPARISON : M ODEL V ERIFICATION & B ASIC A NALYSIS Comparison, Analysis & Solution OSATESTOOD Fault Detection at Early Stage      Model Statistic Checking Mark25

26. C OMPARISON : E ASINESS OF U SE Comparison, Analysis & Solution OSATESTOOD Installation Easy to install, but Java 5.0 or higher and Eclipse 3.3 or higher required; platform independent Both the installation file for Windows and Unix are offered with instructions, easy to install. Training With a few background of AADL language, one can build the illustrated model within 1 day and analysis the model within one week.  With a few background of AADL, one can build the illustrated model within 2 days and analysis the model within 10 days. Interface  Easier to switch between textual and graphical view. A lot buttons are offered on the tool bar, but some are not quite often-used.  Simple interface, but it is not as easy as OSATE concerning finding certain functions or switching between the code and diagrams. Mark35

27. C OMPARISON : M ORE S UPPORT ON M ODEL A NALYZING (OSATE) Comparison, Analysis & Solution

28. C OMPARISON : M ORE S UPPORT ON M ODEL A NALYZING (STOOD) Comparison, Analysis & Solution

29. C OMPARISON : M ORE S UPPORT ON M ODEL A NALYZING Comparison, Analysis & Solution OSATESTOOD Schedulability Analysis Problem Identification      Mark25

30. C OMPARISON : T ECHNICAL S UPPORT Comparison, Analysis & Solution OSATESTOOD Manual User manual offered together with the eclipse platform User manuals available with the installation package Tutorial A complete tutorial for the previous release with example available Complete tutorial for STOOD 5.2, which works well for STOOD 5.3 Example Model Several examples available online; one detailed example with instructions offered by SEI course Examples available together with the installation package. Other Resource  AADL community Technical support from Ellidiss Mark31

31. C OMPARISON : D OCUMENT & C ODE G ENERATION Comparison, Analysis & Solution OSATESTOOD Document Generation  Document Generation not supported. Document auto generation supported with the formation of PDF, PS, Word, etc. Code Generation  Code generation not supported with itself, but can be achieved using Ocarina plug-in for Eclipse.  Can generate some basic C and Ada code, but the code is not completely functional and put into use without modification. Mark73

32. C OMPARISON : L OW E NTRY - COST Comparison, Analysis & Solution OSATESTOOD Price Open source, free!  STOOD itself is a commercial tool. Free trial version can be downloaded, but it is limited to 10 hood without analysis support offered with AADL Inspector. Mark16

33. A NALYSIS & S OLUTION Comparison, Analysis & Solution CategoryNo.CriteriaPriority (P i )OSATESTOOD Essential / Critical 0Modelling124 1 Model Verification & Basic Analysis 125 Important 2Easiness of Use235 3 More Support on Model Analyzing 225 4Technical Support231 Desired 5 Code & Document Generation 373 6Low Entry-cost316 Mark4458

34. C ONCLUSION Conclusion NIH Scoring & Analysis 2 Test Cases 7 criteria

35. R EFERENCES [1] P. H. Feiler, D. P. Gluch and J. J. Hudak, "The Architecture Analysis & Design Language (AADL): An Introduction“, Carnegie Mellon University, 2006. [2] Carnegie Mellon University, "AADL | Tool Integrators |Toolsets | OSATE“, Carnegie Mellon University, 2011. [Online]. Available: http://www.aadl.info/aadl/currentsite/tool/osate.html. [Accessed 2 2012]. [3] Ellidiss Software, "STOOD - Modeling Tools“, Ellidiss Software, 2012. [Online]. Available: http://www.ellidiss.com/stood.asp. [Accessed 2 2012]. [4] National Institute of Health, "Scoring System and Procedure“, Maryland, USA, 2008. [5] Software Engineering Institute, "SAE AADL Example Models “, Carnegie Mellon University, 2011. [Online]. Available: http://www.aadl.info/aadl/currentsite/examplemodel.html. [Accessed 2 2012].

36. T HANK Y OU !