Software Dependability: The Next Step Michael Evangelist Fraunhofer Center for Experimental Software Engineering College Park, MD

August 7, Fraunhofer Center for Experimental Software Engineering 2

3 Barry’s Questions Look at software engineering –products –processes (including methods, tools, and engineering principles) –management –technology transition Focus on high-impact research solutions for high-priority DoD needs

August 7, Fraunhofer Center for Experimental Software Engineering 4 High Dependability Ubiquity of computing and the coming nano revolution demand higher dependability –for defense and commercial systems Not only dependable software but also –dependable development process –dependable acquisition process –dependable research process

August 7, Fraunhofer Center for Experimental Software Engineering 5 High-Dependability Research Model Rigorous Evaluation and Feedback Framework-Based Technology Transition Careful Problem Discovery New Principles and Technologies

August 7, Fraunhofer Center for Experimental Software Engineering 6 Example Evaluation Results in High-Dependability Computing [Basili et al.] Controlled evaluation experiments –comparing code reading vs. functional testing vs. structural testing –on effectiveness of Ada for flight-dynamics software –on effectiveness of Independent Verification & Validation

August 7, Fraunhofer Center for Experimental Software Engineering 7 Potential Experimentation on High-Dependability Technologies Verification: model-checking (Clarke et al.), proof- carrying code (Lee and Necula),... Synthesis: generate distributed programs from high- level temporal-logic specifications (Attie et al.) Self-stabilizing systems: system guaranteed to converge to “good” state under stress (Arora et al.)....

August 7, Fraunhofer Center for Experimental Software Engineering 8 Summary In 21 st Century, DoD must focus on high- dependability computing –new products, principles, theory –plus high-dependability research model to provide sound framework for research and technology transition Without improved model, DoD gets less ROI Research community loses impact