Safety-critical software testing in airborne systems : the modified condition/decision coverage criterion
Name
43583465-MIT.pdf
Description
Full printable version
Size
6.99 MB
Format
Adobe PDF
Checksum (MD5)
ca8ec489577f88bd7c53664819898f30
Author(s)
Dupuy, Arnaud (Arnaud Guillaume), 1973-
Advisor(s)
Nancy G. Leveson.
Date Issued
1999
Publisher
Massachusetts Institute of Technology
Abstract
In order to be certified by the FAA, airborne software must comply with the D0-178B standard. For the unit testing of safety-critical software, this standard requires the testing process to meet a strong source code structure coverage criterion, referred to as Modified Condition/Decision Coverage criterion. This part of the standard is controversial in the aviation community, in particular because the coverage criterion is apparently not related to the safety of the software. In this thesis, we follow the letter of the D0-1788 standard to perform the unit testing of the Attitude Control Sy stem of the HETE-2 satellite. This allowed us to gain some insights on the D0- 1788 testing procedure, and to prove that in the case of the considered software, this method was well adapted.
Description
Thesis (S.M.)--Massachusetts Institute of Technology, Dept. of Aeronautics and Astronautics, 1999.
Includes bibliographical references (p. 112-113).
Subjects
Aeronautics and Astronautics
MIT Department
Massachusetts Institute of Technology. Department of Aeronautics and Astronautics
Terms of Use
M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.
Persistent DSpace Link
