This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| en:safeav:softsys:softtests [2025/06/05 12:09] – pczekalski | en:safeav:softsys:softtests [2025/09/18 11:21] (current) – ToDo checked: raivo.sell | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Testing Software Systems ====== | ====== Testing Software Systems ====== | ||
| - | {{: | + | {{: |
| - | <todo @raivo.sell></ | + | <todo @raivo.sell |
| + | |||
| + | B. TRADITIONAL DECISION-BASED EXECUTION | ||
| + | As cyber-physical systems evolved, information technology (IT) rapidly transformed the world. Electronics design trends revolutionized industries, starting with centralized computing led by firms like IBM and DEC. These technologies enhanced productivity for global business operations, significantly impacting finance, HR, and administrative functions, eliminating the need for extensive paperwork. | ||
| + | |||
| + | |||
| + | ---- | ||
| + | {{: | ||
| + | |||
| + | Fig. 3. Electronics Megatrends. | ||
| + | |||
| + | The next wave in economy shaping technologies consisted of edge computing devices (red in Figure 3) such as personal computers, cell phones, and tablets. With this capability, companies such as Apple, Amazon, Facebook, Google, and others could add enormous productivity to the advertising and distribution functions for global business. Suddenly, one could directly reach any customer anywhere in the world. This mega-trend has fundamentally disrupted markets such as education (online), retail (ecommerce), | ||
| + | {{: | ||
| + | |||
| + | Fig. 4. Progression of System Specification (HW, SW, AI). | ||
| + | |||
| + | As shown in Figure 4, within electronics, | ||
| + | In their basic form, IT systems were not safety critical, and the similar levels of legal liability have not attached to IT products. However, the size and growth of IT is such that problems in large volume consumer products can have catastrophic economic consequences [10]. Thus, the V&V function was very important. | ||
| + | IT systems follow the same generic processes for V&V as outlined above, but with two significant differences around the execution paradigm and source of errors. First, unlike the PBE paradigm, the execution paradigm of IT follows a Decision Based Execution mode (DBE). That is, there are no natural constraints on the functional behavior of the underlying model, and no inherent properties of monotonicity. Thus, the whole massive ODD space must be explored which makes the job of generating tests and demonstrating coverage extremely difficult. | ||
| + | 1) Code Coverage: Here, the structural specification of the virtual model is used as a constraint to help drive the test generation process. This is done with software or hardware (RTL code). | ||
| + | 2) Structured Testing: A process of component, subsection, and integration testing has been developed to minimize propagation of errors. | ||
| + | 3) Design Reviews: Structured design reviews with specs and core are considered best practice. | ||
| + | |||
| + | A good example of this process flow is the CMU Capability Maturity Model Integration (CMMI) [11] which defines a set of processes to deliver quality software. | ||
| + | Finally, testing in the DBE domain decomposes into the following philosophical categories: “Known knowns:” Bugs or issues that are identified and understood, “Known unknowns” Potential risks or issues that are anticipated but whose exact nature or cause is unclear, and “Unknown unknowns” Completely unanticipated issues that emerge without warning, often highlighting gaps in design, understanding, | ||
| + | In summary, the key underpinnings of the DBE paradigm from a V&V point of view are: | ||
| + | 1) Unconstrained and not well-behaved execution space for scenario test generation, | ||
| + | 2) Generally, | ||
| + | 3) V&V focused on logical errors not mechanical failure | ||
| + | 4) Generally, | ||
| + | 5) “Unknown-unknowns” a key focus of validation. | ||
| + | |||
| + | A key implication of the DBE space is that the idea from the PBE world of building a list of faults and building a safety argument for them is antithetical to the focus of DBE validation. | ||