1. Réunion Métier Logiciel Mars 2004 Open Source Development Environment for Safety System Patrick Farail, Pierre Gaufillet, Gérard Ladier AIRBUS France

2. Page 2 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Definition of high level requirements Architecture description Real time architecture Static Architecture Code Exemple of Software Development Environment Target Text Processing Tools Requirement Development Tool Modelling Tools Host environment : Ada, C, Java cross-compiling, linking, debugging for : powerpc, sharc TMS … Text Processing Tools Modelling Tools Changement / Configuration / Traceability

3. Page 3 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. A limited market Long life Products ● Uncertain suppliers durability ● Subordination to the suppliers policy ● Licences costs ● Easy deployment and use peak management ● Maintenance cost ● Possible change to specific maintenance for some products

4. Page 4 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. ➢ Proprietary Software : the author / publisher controls the evolution of its products. The source code is not available, or it is not possible to modify and distribute it freely. The author / publisher generally offers a guarantee ➢ Free Software : the author allows the free use of its product. The source code is available, and it is possible to modify it. The product (eventually modified) can be redistributed freely. There is generally no guarantee excepted the legal minimum. ➢ The idea of freedom is relative to : the execution of the program for any use, the analysis of the program operations and the adaptation to the needs of the user, the product distribution, the modification of the product. ➢ Consequences : the source code is required to be available and freely modifiable. It is the principle of resources, load and knowledge sharing. A free software is not always free of charge A zero cost software is not always free Open Source Software

5. Page 5 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Copyleft licences ( ex : GPL) ● Free use, copy, modification and distribution ● Derived works must follow the same licence ● Mentions à faire figurer : copyright, application de la GPL, non garantie non-copyleft licences ( ex: Apache) ● Same as the copyleft licences but with specific restrictions. ● For example, for some licences, it is possible to derive a proprietary product from a free program. Open source software protections

6. Page 6 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Sustainable investment : based on the users rather than on the market Largely O.S. independent : multi-domain target, obsolescence management, a real strategy domain dependent Adaptability : avoid to disturb our process due to tools, better change management Preceptible licence and deployment costs reduction : load optimization, the cost is neither relative to the market nor to the added value of the product, but to the complexity of its implementation Common maintenance The Make benefits and the Buy advantages Open Source Solutions advantages

7. Page 7 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Concerning requirements and design phasis Some solutions exist, but they are uncomplete and it is not possible to use them in an industrial context. ➔ It is required to invest in some development. An efficient maintenance structure has to be defined. Concerning the coding phasis Some mature solutions are available and are already used in industrial projects : GNAT(Ada), GCC (host environment), debuggers, Eclipse (EDI), Glade, perl, python,... ➔ it is important to validate some other possibilities, especially about cross- compiling environments : GCC, GDB,... Available Open Source Solutions

8. Page 8 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. A CNRT-AE project : 2004 -> 2006 ✗ Working on legal aspects ✗ Developing Development Environment ✗ Evaluations and Development ✗ Common maintenance structure definition We do not start from zero ✗ Based on existing solutions ✗ Some in-house tools from partners could be released in open source The first partners Actions

9. Page 9 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Academic field Involvement An interesting field also for software engineering research activities :  15 courses subjects identified  5 thesis subjects proposed –Vérification quantitative de systèmes temporisés. –Modelisation et vérification de systèmes temporisés ordonnancés. –Spécification et vérifiation de systèmes réactifs paramétrés. –Pilotage d'analyse statique de code par des propriétés de conception. –Globalement asynchrone Localement Synchrone The project development is hosted by ENSEEIHT

10. Page 10 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Requirements

11. Page 11 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Technical choices ✔ A n-third architecture model centered. ✔ Adaptable tools (configuration, plugins,...). ✔ A smooth transition from existing environment (models, verificators, tests plans,...) to the new tools and formalisms (UML2,...). ✔ The development will be based on existing open source softwares. ✔ The tools will be able to manage distributed team. ✔ An open system (import/export plugins, data access API).

12. Page 12 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Modeling Tools (Meta-)models editor Identified basis ATOM 3, Eclipse,... Key points (meta-)models description language, specific meta-models (UML, AADL/COTRE, automatons)

13. Page 13 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Verifying Tools Model checkers, simulators, static verification tools, performances analysers Identified basis nuSMV2, SPIN, Tina, Maria, NEPTUNE,... Key points Software architecture models ans finite states automaton processing, improvement of the verification methods concerning the states space size, verification results interpretation, re-use of the existing verification tools

14. Page 14 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Real time architecture Verification AADL SAE Standard compatible HOOD mapping UML Mapping Model of Library O.S., Hardware … Designer

15. Page 15 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Real time architecture Verification

16. Page 16 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Implementing Tools Coding environment, specific target compilers (Shark, PowerPC,...), interpreters, debugging tools, XML and GUI (development and prototyping) Identified basis Eclipse, GCC, GDB, DDD, Perl, Python, ocaml, Glade,... Key points Adaptations (languages and target support), integration with version control tools, qualification constraints, déployment

17. Page 17 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Generating Tools Documentation, code, tests and data base generators Identified basis docbook, gendoc, FOP, SciLab, ATL,... Key points Versatility of generators, functional tests from formal models generation, integration tests from AADL/COTRE architectures, reuse of existing generators

18. Page 18 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Testing Tools Conformity tests suites (POSIX, IEEE 754, TCP/IP, SNMP, TFTP, NFS,...), unit and system tests tools, structural coverage and GUI tests tools Identified basis JUnit, DejaGNU,... Key points Re-use of the existing tests plans, respect the software interfaces already defined, performances, integration with the tests plans generators  Test OK  Test Failed

19. Page 19 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Managing Tools Version control, model, processus, requirements and modifications management. Identified basis CVS, Arch, Subversion, Aegis, MARCEL, MySQL, Bugzilla,... Key points Definition and development of the bus of models, existing models importation (HOOD, Sildex, Rose), models exportation, data access API, model merge & comparision, exchanges between the bus of models and the version control tools, requirements traceability.

20. Page 20 © AIRBUS FRANCE S.A.S. Tous droits réservés. Document confidentiel. Ce document et son contenu sont la propriété d’AIRBUS FRANCE S.A.S. Aucun droit de propriété intellectuelle n’est accordé par la communication du présent document et de son contenu. Ce document ne doit pas être reproduit ou communiqué à un tiers sans l’autorisation expresse et écrite d’AIRBUS FRANCE S.A.S. Ce document et son contenu ne doivent pas être utilisés à d’autres fins que celles qui sont autorisées. Les déclarations faites dans ce document ne constituent pas une offre commerciale. Elles sont basées sur les postulats indiqués et sont exprimées de bonne foi. Si les motifs de ces déclarations n’étaient pas démontrés, AIRBUS FRANCE S.A.S serait prêt à en expliquer les fondements.