2. ObjectAda Raven Safety Critical Software Development Environment

3. 3 ObjectiveObjective nAcquaint you with our Ada95 products and services Development Systems Development Systems  Product Goals & Philosophy  Product Line Organization & Availability  Technical Characteristics Support For Safety Critical Certification Support For Safety Critical Certification – DO-178B Level A Aonix Is ….. Aonix Is …..  Leading Supplier for Ada83  Only Supplier for Ada95 nAcquaint you with our Ada95 products and services Development Systems Development Systems  Product Goals & Philosophy  Product Line Organization & Availability  Technical Characteristics Support For Safety Critical Certification Support For Safety Critical Certification – DO-178B Level A Aonix Is ….. Aonix Is …..  Leading Supplier for Ada83  Only Supplier for Ada95

4. 4 Product Philosophy nStratified, evolvable product line Value & price competitive Value & price competitive Support different needs at appropriate prices Support different needs at appropriate prices Support activities in multiple areas of lifecycle/process Support activities in multiple areas of lifecycle/process Support gradual buy-in for customers Support gradual buy-in for customers Native Native Hard Real-Time Hard Real-Time Certifiable Safety Critical Systems Certifiable Safety Critical Systems nStratified, evolvable product line Value & price competitive Value & price competitive Support different needs at appropriate prices Support different needs at appropriate prices Support activities in multiple areas of lifecycle/process Support activities in multiple areas of lifecycle/process Support gradual buy-in for customers Support gradual buy-in for customers Native Native Hard Real-Time Hard Real-Time Certifiable Safety Critical Systems Certifiable Safety Critical Systems

5. 5 Product Line Organization UNIX / Motif / CDE Windows 98 / NT Native x Intel x PowerPC C O R E P R O E N T E R P C E R T I F R I S E I E x 68K D

6. 6 Main Components nGraphical IDE in platform style nCompiler, prelinker, builder, cross- referencer nLightweight library mechanism nIntegrated editor, browser and debugger, cross tools nVariable or optional components: bindings, GUI builder, analysis tools nGraphical IDE in platform style nCompiler, prelinker, builder, cross- referencer nLightweight library mechanism nIntegrated editor, browser and debugger, cross tools nVariable or optional components: bindings, GUI builder, analysis tools

7. 7 ObjectAda Compilers nVery fast Essentially one pass Essentially one pass 70K lpm on SPARC 10 70K lpm on SPARC 10 Multiple units/files in compilation faster due to caching of specs Multiple units/files in compilation faster due to caching of specs nVery fast Essentially one pass Essentially one pass 70K lpm on SPARC 10 70K lpm on SPARC 10 Multiple units/files in compilation faster due to caching of specs Multiple units/files in compilation faster due to caching of specs

8. 8 ObjectAda Library nSource-based No compilation order requirements No compilation order requirements Can use multiple source and object paths Can use multiple source and object paths Persistent info is ASCII and editable Persistent info is ASCII and editable nSource-based No compilation order requirements No compilation order requirements Can use multiple source and object paths Can use multiple source and object paths Persistent info is ASCII and editable Persistent info is ASCII and editable

9. 9 General Real-Time Approach nIntegrative approach: PharLap ETS & Raven for 32 bit Intel PharLap ETS & Raven for 32 bit Intel Tornado, LynxOS & Raven for PowerPC Tornado, LynxOS & Raven for PowerPC (Tornado) & Raven for 68K (Tornado) & Raven for 68K Host-based tools integration as well as target executive Host-based tools integration as well as target executive Real-time extensions Real-time extensions Real-time analysis tools - PerfoRMAx Real-time analysis tools - PerfoRMAx AdaCast AdaCast  Test ; Harness, Case, Coverage, Complexity… nIntegrative approach: PharLap ETS & Raven for 32 bit Intel PharLap ETS & Raven for 32 bit Intel Tornado, LynxOS & Raven for PowerPC Tornado, LynxOS & Raven for PowerPC (Tornado) & Raven for 68K (Tornado) & Raven for 68K Host-based tools integration as well as target executive Host-based tools integration as well as target executive Real-time extensions Real-time extensions Real-time analysis tools - PerfoRMAx Real-time analysis tools - PerfoRMAx AdaCast AdaCast  Test ; Harness, Case, Coverage, Complexity…

10. ObjectAda Raven Certified/Certifiable Compiler/RTS

11. 11 ( Legal ) Safety Systems Laws Regulations Standards Guidelines Case Law Precedence Interpretations Standards Guidelines VisibilityTraceability PROCESS EVIDENCE / RECORD Confidence / Safety

12. 12 RTS Certification DO-178B Level A DO-178B Level A Full Requirements through Test Results Mapping Full Requirements through Test Results Mapping 100% Source Level Coverage 100% Source Level Coverage 100% Machine Level Coverage 100% Machine Level Coverage Full MCDC Coverage Full MCDC Coverage An RTS Can be Certified but, An RTS Can be Certified but,  Termed Certifiable  An RTS is Nothing Unto Itself DO-178B Level A DO-178B Level A Full Requirements through Test Results Mapping Full Requirements through Test Results Mapping 100% Source Level Coverage 100% Source Level Coverage 100% Machine Level Coverage 100% Machine Level Coverage Full MCDC Coverage Full MCDC Coverage An RTS Can be Certified but, An RTS Can be Certified but,  Termed Certifiable  An RTS is Nothing Unto Itself

13. 13 Ravenscar Profile nIndustry Wide Safety Critical Standard nDeterministic Ada95 Subset… nCertifiable Subset nTasking Allowed Rendezvous Disallowed Rendezvous Disallowed Use Protected Objects for Communication Use Protected Objects for Communication nNo Dynamic Memory Allocation netc. nIndustry Wide Safety Critical Standard nDeterministic Ada95 Subset… nCertifiable Subset nTasking Allowed Rendezvous Disallowed Rendezvous Disallowed Use Protected Objects for Communication Use Protected Objects for Communication nNo Dynamic Memory Allocation netc.

14. 14 Safety Critical Real-time Approach nAonix technology for safety-critical applications n Raven and C-SMART  Conforms to Ravenscar Profile  Flags Ravenscar Profile Violations at Compile Time  Level A Certification Package Available  AdaCast for Test Harness and Source Level Coverage  AdaCover machine level coverage analysis  New support for bounded tasking model  New support for segregated loads  PowerPC, 32 bit Intel, 68K nAonix technology for safety-critical applications n Raven and C-SMART  Conforms to Ravenscar Profile  Flags Ravenscar Profile Violations at Compile Time  Level A Certification Package Available  AdaCast for Test Harness and Source Level Coverage  AdaCover machine level coverage analysis  New support for bounded tasking model  New support for segregated loads  PowerPC, 32 bit Intel, 68K

15. 15 Raven Packages nCore Pack  Core Compile System nProject Pack  Ada-Assured and PerfoRMAx nTest Pack  AdaCast, Test: harness, case, coverage,... nSafety Critical Pack  AdaCover: Machine Level Coverage nCertification Pack nDesign Pack  StP/UML with ACD nCore Pack  Core Compile System nProject Pack  Ada-Assured and PerfoRMAx nTest Pack  AdaCast, Test: harness, case, coverage,... nSafety Critical Pack  AdaCover: Machine Level Coverage nCertification Pack nDesign Pack  StP/UML with ACD

16. 16 AdaCoverAdaCover nA Qualified Tool For MC Coverage Target - Data Collection Target - Data Collection  User selectable start/stop points  Single steps on target  Provides full machine level coverage data  Uploaded to Host after execution Host - Post Analysis Host - Post Analysis  Coverage reports  Updates assembly listing  Merge to create total execution reports nA Qualified Tool For MC Coverage Target - Data Collection Target - Data Collection  User selectable start/stop points  Single steps on target  Provides full machine level coverage data  Uploaded to Host after execution Host - Post Analysis Host - Post Analysis  Coverage reports  Updates assembly listing  Merge to create total execution reports

17. 17 AdaCover Sample Usage with AdaCover; with Cover_Test; procedure Cover_Driver is Var : Integer := 0; begin AdaCover.Start(Cover_Test'Address); Cover_Test; AdaCover.Stop; AdaCover.Dump; end Cover_Driver;

18. 18 Sample Safety Critical Applications nBoeing 777 nBoeing 737 nWestinghouse Electric - Nuclear Shutdown nLockheed Martin - C130J and C27 nWestinghouse Brake and Signals London Underground - Jubilee Line extension London Underground - Jubilee Line extension  Biggest Project In Europe Automatic Brakes and Signaling Automatic Brakes and Signaling nBoeing 777 nBoeing 737 nWestinghouse Electric - Nuclear Shutdown nLockheed Martin - C130J and C27 nWestinghouse Brake and Signals London Underground - Jubilee Line extension London Underground - Jubilee Line extension  Biggest Project In Europe Automatic Brakes and Signaling Automatic Brakes and Signaling

19. 19 Certification Experiences C-130J Cockpit Display nReviews Requirements Requirements Design Design Code Code nFunctional Testing nCoverage testing nLarge amount of test data to be analyzed. nReviews Requirements Requirements Design Design Code Code nFunctional Testing nCoverage testing nLarge amount of test data to be analyzed. Note: Over 3000 signatures required on certification material for one RTS Certification system. Note: Over 3000 signatures required on certification material for one RTS Certification system. RTS is about 6000 Lines of Code RTS is about 6000 Lines of Code (MIPS 3500)

20. 20 Brakes Crane/Hydro-Air Axle Steering Parker/Abex-NWL GPS Canadian Marconi Power Management Sundstrand Boeing 777 Sample Systems

21. 21 Hercules - C130J Flight Management Unit Ground Collision Avoidance System Back-up FMU Aonix SC Products used for:

22. 22 London - Jubilee Line Extension Project Underground trains, faster, closer together Underground trains, faster, closer together M68030 controllers M68030 controllers Trains communicate with each other and with central control Trains communicate with each other and with central control Software Integrity Level 4 (SIL) Software Integrity Level 4 (SIL) RIA 23 required RIA 23 required Mapping document produced between RIA 23 and Aonix (DO-178B) Certification materials Mapping document produced between RIA 23 and Aonix (DO-178B) Certification materials Largest funded project in Europe Largest funded project in Europe Underground trains, faster, closer together Underground trains, faster, closer together M68030 controllers M68030 controllers Trains communicate with each other and with central control Trains communicate with each other and with central control Software Integrity Level 4 (SIL) Software Integrity Level 4 (SIL) RIA 23 required RIA 23 required Mapping document produced between RIA 23 and Aonix (DO-178B) Certification materials Mapping document produced between RIA 23 and Aonix (DO-178B) Certification materials Largest funded project in Europe Largest funded project in Europe

23. 23 Safety Critical Customers Aircraft/Avionics –  Global Positioning System (GPS) (Sextant Avionique)  Flight control data concentrator: AIRBUS A330-A340 (Sextant Avionique)  Braking and steering control unit: AIRBUS A330-A340 (Thomson CSF/DOI and Messier Bugatti)  Air Traffic Control (ATC): Ground-based instrument landing system (Navia, formerly Normarc)  Air Traffic Control (ATC): Germany, England, France and Belgium (EUROCONTROL)  Flight Management System (FMS): (EUROCONTROL)  (ATC): Denmark, Belgium, New Zealand, South Africa, Kenya, Pakistan, and Greece (Thomson CSF/SDC)  Air Traffic Control simulators: Switzerland, Ireland (Thomson CSF/SDC)  Air Traffic Control System (ATC): (FAA)  Radar system: Civil avionics (Wilcox Electric)  Engine control system: (Chandler Evans)  Flight Management: Lockheed C130J (Lockheed Martin)  Ground Collision Avoidance: Lockheed C130J (Aerosystems International)  Displays: Lockheed C130J (Lockheed Sanders)  Global Positioning System: Boeing 777 (Canadian Marconi)  Axle Steering System: Boeing 777 (Parker/Abex-NWL)  Power Management System: Boeing 777 (Sundstrand)  Brakes: Boeing 777 (Crane/Hydro-Air) Nuclear and Electricity –  Power plant control: (Sema Group)  Power generating system simulation: (Thomson CSF/DSI)  Nuclear reactor project: (Nuclear Electric)  Power plant power transmission system: (ABB Relays AG)  Nuclear reactor control simulation: (CEA Cadarache)  Nuclear Shutdown System: Nuclear power station in Czech Republic (Westinghouse Electric) Aircraft/Avionics –  Global Positioning System (GPS) (Sextant Avionique)  Flight control data concentrator: AIRBUS A330-A340 (Sextant Avionique)  Braking and steering control unit: AIRBUS A330-A340 (Thomson CSF/DOI and Messier Bugatti)  Air Traffic Control (ATC): Ground-based instrument landing system (Navia, formerly Normarc)  Air Traffic Control (ATC): Germany, England, France and Belgium (EUROCONTROL)  Flight Management System (FMS): (EUROCONTROL)  (ATC): Denmark, Belgium, New Zealand, South Africa, Kenya, Pakistan, and Greece (Thomson CSF/SDC)  Air Traffic Control simulators: Switzerland, Ireland (Thomson CSF/SDC)  Air Traffic Control System (ATC): (FAA)  Radar system: Civil avionics (Wilcox Electric)  Engine control system: (Chandler Evans)  Flight Management: Lockheed C130J (Lockheed Martin)  Ground Collision Avoidance: Lockheed C130J (Aerosystems International)  Displays: Lockheed C130J (Lockheed Sanders)  Global Positioning System: Boeing 777 (Canadian Marconi)  Axle Steering System: Boeing 777 (Parker/Abex-NWL)  Power Management System: Boeing 777 (Sundstrand)  Brakes: Boeing 777 (Crane/Hydro-Air) Nuclear and Electricity –  Power plant control: (Sema Group)  Power generating system simulation: (Thomson CSF/DSI)  Nuclear reactor project: (Nuclear Electric)  Power plant power transmission system: (ABB Relays AG)  Nuclear reactor control simulation: (CEA Cadarache)  Nuclear Shutdown System: Nuclear power station in Czech Republic (Westinghouse Electric)

24. 24 Safety Critical Customers Trains and Railways –  Subway network control systems: Paris, Calcutta, and Cairo (GEC ALSTHOM)  Railway and signal control system: TGV for north lines and the Chunnel  Brake system for the TGV: the TVM 430 project (CSEE Transports)  Brake and signals system: London Underground, Jubilee Line extension (Westinghouse) Space –  Satellite positioning system: (Alcatel SEL)  Launching platform: Ariane V project (Aerospatiale with the CNES and Matra Marconi Space)  Switching and telemeasuring systems: Galileo Mars probe project (CNES)  Satellite imaging system: SPOT project (CNES)  Columbus part of International Space Station: (ERNO Raumfahrttechnik)  Data management systems and network control system: International Space Station (NASA)  Data management system: APM (Atmospheric Pressure Module) for International Space Station (Matra Marconi) Trains and Railways –  Subway network control systems: Paris, Calcutta, and Cairo (GEC ALSTHOM)  Railway and signal control system: TGV for north lines and the Chunnel  Brake system for the TGV: the TVM 430 project (CSEE Transports)  Brake and signals system: London Underground, Jubilee Line extension (Westinghouse) Space –  Satellite positioning system: (Alcatel SEL)  Launching platform: Ariane V project (Aerospatiale with the CNES and Matra Marconi Space)  Switching and telemeasuring systems: Galileo Mars probe project (CNES)  Satellite imaging system: SPOT project (CNES)  Columbus part of International Space Station: (ERNO Raumfahrttechnik)  Data management systems and network control system: International Space Station (NASA)  Data management system: APM (Atmospheric Pressure Module) for International Space Station (Matra Marconi)

25. 25 One Set of Certification Evidence Delivery170 lb

26. 26 One CD-ROM captures all SDF’s

27. 27 SummarySummary Flexible, well-planned product architecture Flexible, well-planned product architecture Lightweight implementation technology Lightweight implementation technology Vast Experience in Safety Critical Systems Vast Experience in Safety Critical Systems Supplier of Certifiable RTS and Needed Support Tools Supplier of Certifiable RTS and Needed Support Tools  Leading Supplier for Ada83  Only Supplier for Ada95 Off-The-Shelf Certification Packages Off-The-Shelf Certification Packages Flexible, well-planned product architecture Flexible, well-planned product architecture Lightweight implementation technology Lightweight implementation technology Vast Experience in Safety Critical Systems Vast Experience in Safety Critical Systems Supplier of Certifiable RTS and Needed Support Tools Supplier of Certifiable RTS and Needed Support Tools  Leading Supplier for Ada83  Only Supplier for Ada95 Off-The-Shelf Certification Packages Off-The-Shelf Certification Packages

28. 28