From AADL to timed abstract state machine: a certified model transformation

Abstract : Architecture Analysis and Design Language (AADL) is an architecture description language standard for embedded realtime systems widely used in the avionics and aerospace industry to model safetycritical applications. To verify and analyze the AADL models, model transformation technologies are often used to automatically extract a formal specification suitable for analysis and verification. In this process, it remains a challenge to prove that the model transformation preserves the semantics of the initial AADL model or, at least, some of the specific properties or requirements it needs to satisfy. This paper presents a machine checked semanticspreserving transformation of a subset of AADL (including periodic threads, data port communications, mode changes, and the AADL behavior annex) into Timed Abstract State Machines (TASM). The AADL standard itself lacks at present a formal semantics to make this translation validation possible. Our contribution is to bridge this gap by providing two formal semantics for the subset of AADL. The execution semantics provided by the AADL standard is formalized as Timed Transition Systems (TTS). This formalization gives a reference expression of AADL semantics which can be compared with the TASMbased translation (for verification purpose). Finally, the verified transformation is mechanized in the theorem prover Coq.
Document type :
Journal articles
Liste complète des métadonnées
Contributor : Jean-Pierre Talpin <>
Submitted on : Sunday, December 14, 2014 - 7:38:35 PM
Last modification on : Friday, April 12, 2019 - 4:23:06 PM


  • HAL Id : hal-01095002, version 1


Zhibin Yang, Kai Hu, Dianfu Ma, Jean-Paul Bodeveix, Lei Pi, et al.. From AADL to timed abstract state machine: a certified model transformation. Journal of Systems and Software, Elsevier, 2014, Journal of Systems and Software, pp.20. ⟨hal-01095002⟩



Record views