NASDA IVV ……….pptVIP

NASDA IVV ……….. July 29th, 2003 @NASA IVV Facility Naoki Ishihama, NASDA Hideki Nomoto, JAMSS/MIT Haruka Nakao, JAMSS Contents Introduction of NASDA IVV approaches Project IVV activities’ status and findings Satellites IVV (SELENE, WINDS) JEM Pre-Shipping IVV JEM IVV HTV IVV Centrifuge IVV H-IIA Safety Range Ground system IVV New Methodology Research Software QA activity and Process Improvement NASDA IVV Functions IVV approaches Satellite IVV Activity- WINDS, SELENE - Satellite IVV Project Characteristic Basically non 2FT system (Fail safe, 1 fail operative) One third of software/firmware are re-use. High level specification defines detailed control theory and logic. High speed calculation has become to be required. Modeling of Satellite Attitude Control Software Requirement using UPPAAL Real-time Application Hard to deal with time constraints “What” and “How” should we do? We used UPPAAL. UPPAAL: Model networks of extended timed automata with typical data Verify an invariant and reachability of the model Modeling of Satellite Attitude Control Software Requirement using UPPAAL Pre-shipping Verification for Japan Experiment Module (JEM) Software Pre-shipping Verification for JEM Software Equivalency Checking Tool of source code (ECT) Equivalency Checking Tool of source code (ECT) is a reverse engineering tool that generates a flow diagram from a source code. Modifying GCC(GNU Compiler) 2.95.3 and DOT included in GRAPHVIZ tool set Equivalency Checking Tool (ECT) Equivalency Checking Tool (ECT) Equivalency Checking Tool (ECT) Lesson and Learned Flow diagram and additional information can be clearly compared with detailed design specification to determine the equivalency and differentials. realize misunderstanding and miscommunication between programmer and system designer Light weight code checking tool: Splint Comment (warning) is different with compiler. Most security attacks exploit instances Many of these flaws could be detected and eliminated before softw