2026-09-20T09:21:23Zhttps://dspace.mit.edu/server/oai/requestoai:dspace.mit.edu:1721.1/94782021-07-05T14:03:20Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023
Nancy G. Leveson.
Dupuy, Arnaud (Arnaud Guillaume), 1973-
Massachusetts Institute of Technology. Department of Aeronautics and Astronautics
2005-08-22T18:40:38Z
2005-08-22T18:40:38Z
1999
1999
http://hdl.handle.net/1721.1/9478
43583465
Thesis (S.M.)--Massachusetts Institute of Technology, Dept. of Aeronautics and Astronautics, 1999.
Includes bibliographical references (p. 112-113).
In order to be certified by the FAA, airborne software must comply with the D0-178B standard. For the unit testing of safety-critical software, this standard requires the testing process to meet a strong source code structure coverage criterion, referred to as Modified Condition/Decision Coverage criterion. This part of the standard is controversial in the aviation community, in particular because the coverage criterion is apparently not related to the safety of the software. In this thesis, we follow the letter of the D0-1788 standard to perform the unit testing of the Attitude Control Sy stem of the HETE-2 satellite. This allowed us to gain some insights on the D0- 1788 testing procedure, and to prove that in the case of the considered software, this method was well adapted.
by Arnaud Dupuy.
S.M.
113 leaves
7328533 bytes
7328291 bytes
application/pdf
application/pdf
eng
Massachusetts Institute of Technology
M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.
http://dspace.mit.edu/handle/1721.1/7582
Aeronautics and Astronautics
Safety-critical software testing in airborne systems : the modified condition/decision coverage criterion
Thesis
application/pdf
false
Publication
unknown
unknown
<Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="6fb95257-938b-4a00-b881-e41e2032957e">
<Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type>
<Language>eng</Language>
<Title>Safety-critical software testing in airborne systems : the modified condition/decision coverage criterion</Title>
<PublishedIn>
<Publication>
</Publication>
</PublishedIn>
<PublicationDate>1999</PublicationDate>
<Authors>
<Author>
<DisplayName>Dupuy, Arnaud (Arnaud Guillaume), 1973-</DisplayName>
<Affiliation>
<OrgUnit>
</OrgUnit>
</Affiliation>
</Author>
</Authors>
<Editors>
</Editors>
<Publishers>
<Publisher>
<DisplayName>Massachusetts Institute of Technology</DisplayName>
<OrgUnit />
</Publisher>
</Publishers>
<License>http://dspace.mit.edu/handle/1721.1/7582</License>
<Keyword>Aeronautics and Astronautics</Keyword>
<Abstract>In order to be certified by the FAA, airborne software must comply with the D0-178B standard. For the unit testing of safety-critical software, this standard requires the testing process to meet a strong source code structure coverage criterion, referred to as Modified Condition/Decision Coverage criterion. This part of the standard is controversial in the aviation community, in particular because the coverage criterion is apparently not related to the safety of the software. In this thesis, we follow the letter of the D0-1788 standard to perform the unit testing of the Attitude Control Sy stem of the HETE-2 satellite. This allowed us to gain some insights on the D0- 1788 testing procedure, and to prove that in the case of the considered software, this method was well adapted.</Abstract>
<Access xmlns="http://purl.org/coar/access_right"
>
</Access>
</Publication>