CoCoSim, a code generation framework for control/command applications: An overview of CoCoSim for multi-periodic discrete Simulink models

H Bourbouh, PL Garoche, T Loquen… - Embedded Real Time …, 2020‏ - ntrs.nasa.gov
We present CoCoSim, a framework to support the design, code generation and analysis of
discrete dataflow model expressed in Simulink. In this work, we specifically focus on the …

Equation-directed axiomatization of Lustre semantics to enable optimized code validation

L Brun, C Garion, PL Garoche, X Thirioux - ACM Transactions on …, 2023‏ - dl.acm.org
Model-based design tools like SCADE Suite and Simulink are often used to design safety-
critical embedded software. Consequently, generating correct code from such models is …

Solving constrained horn clauses over algebraic data types

L Zavalía, L Chernigovskaia, G Fedyukovich - International conference on …, 2023‏ - Springer
Safety verification problems are often reduced to solving the satisfiability of Constrained
Horn Clauses (CHCs), a set of constraints in first-order logic involving uninterpreted …

Automated analysis of Stateflow models

H Bourbouh, PL Garoche, C Garion… - … conference on logic for …, 2017‏ - hal.science
Stateflow is a widely used modeling framework for embedded and cyberphysical systems
where control software interacts with physical processes. In this work, we present a …

Hierarchical state machines as modular horn clauses

PL Garoche, T Kahsai, X Thirioux - ar** a new
commercial transport aircraft. Moreover, in this cost category, verification and validation …

Preserving functional correctness of cyber-physical system controllers: from model to code

G Davy, C Garion, PL Garoche, P Roux… - 2018 Forum on …, 2018‏ - ieeexplore.ieee.org
In this paper, we outline a methodology allowing to support the formal verification of
functional properties for generated code. When relying on a code generator, a model is …

Modular analysis of numerical properties by abstract interpretation

R Boutonnet - 2020‏ - theses.hal.science
Any software bug or device malfunction in safety-critical systems can have
catastrophicconsequences. The validation and analysis of programs in critical systems is of …