Projet de recherche doctoral numero :4440

Description

Date depot: 1 janvier 1900
Titre: Formal certification of real-time implementations
Directeur de thèse: Dumitru POTOP-BUTUCARU (Inria-Paris (ED-130))
Domaine scientifique: Sciences et technologies de l'information et de la communication
Thématique CNRS : Non defini

Resumé: Research context: Established in 1967, INRIA is the only French public research body fully dedicated to computational sciences. Combining computer sciences with mathematics, INRIA’s 3,500 researchers strive to invent the digital technologies of the future. Educated at leading international universities, they creatively integrate basic research with applied research and dedicate themselves to solving real problems, collaborating with the main players in public and private research in France and abroad and transferring the fruits of their work to innovative companies. The researchers at Inria published over 4,450 articles in 2012. They are behind over 250 active patents and 112 startups. The 180 project teams are distributed in eight research centers located throughout France. The AOSTE research team ( http://www.inria.fr/en/teams/aoste) promotes the use of synchronous formalisms for the high-level modeling, the full formal design, and the distributed real-time implementation of embedded software. The team builds upon prior work by its members on the SyncCharts, Esterel, and SynDEx formalisms, which included extensive algorithmic studies on dedicated modeling, compilation, analysis, and optimization techniques. Our main expertise is in the fields of formal semantics of synchronous reactive systems, and optimized mapping (i.e. distribution and scheduling) between application algorithms and physical architectures descriptions. The position is funded by the ITEA3 Assume collaborative project (https://itea3.org/project/assume.html). Assume proposes a set of methods and tools for the synthesis of correct and efficient parallel software. The common denominator of these techniques is formalization and full automation. The technical focus is placed on formal compiler verification and on correct real-time implementation for parallel applications. In both cases, hardware modeling is recognized as a major issue and dedicated specific attention. Work will be done in collaboration with the GALLIUM research team (http://www.inria.fr/en/teams/gallium). Topic description: To this day, the design and implementation of industrial real-time systems has remained to a large extent a craft, involving significant manual phases. Automation is only possible when design needs are formalized and standardized, to allow cost-effective tool building. But automation can no longer be avoided, as the complexity of systems steadily increases in both specification size (number of tasks, processors, etc.) and complexity of the objects involved (dependent tasks, multiple modes and criticalities, novel processing elements and communication media...). Fortunately, the standardization of specification languages (Simulink, Scade...) and of implementation platforms (AUTOSAR, ARINC653...) is today advanced enough that fully automated implementation is attainable for industrially significant classes of systems. The AOSTE team actively develops (among other tools) the Lopht real-time systems compiler [2,3] which allows fully automated multi-processor implementation of embedded control specifications with complex functional and non-functional properties. Lopht target s systems using static (off-line) or time-triggered real-time scheduling. Such systems are used in safety-critical systems (avionics, automotive, rail), such as those considered by the Assume project. The objective of this PhD thesis is to formally prove the correctness of (part of) the automatic code generation technology of Lopht. The main focus of our work will be on the formal verification of compilation techniques ensuring the respect of non-functional requirements, and in particular real-time requirements such as release dates, deadlines and periods. The result will be an extension of the CompCert methodology [1] to the embedded system level, taking into account non-functional requirements.

Doctorant.e: Didier Keryan