从设计到安全分析:异构模型转换与交叉验证
CSTR:
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

TP311

基金项目:

国家重点研发计划(2022YFA1005102)


From Design to Safety Analysis: Heterogeneous Model Transformation and Cross-Validation
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    在复杂软件系统开发过程中,设计阶段与验证阶段的有效衔接是确保系统可靠性和功能正确性的关键.然而,设计工具与验证工具在建模语言、语义和数据结构上的异构性,易导致模型转换语义不一致、工具链互操作性不足以及验证覆盖不充分.为解决上述挑战,本文提出一种基于统一中间表示的分层转换与多重交叉验证机制.该机制以设计模型为起点,结合系统理论过程分析(STPA)开展危险分析与不安全控制行为识别,提炼安全约束,并与既有的功能、时间和安全属性进行互补校验.随后,构建设计模型到统一中间表示(UIR,Unified Intermediate Representation)的映射,在统一语法与语义域中形式化描述结构、行为、时序与安全约束,并据此给出覆盖上述要素的分层转换规则及其追溯性元数据.基于UIR,派生时序模型、逻辑模型与概率模型等互补的验证模型,并将STPA导出的安全约束系统化映射为可验证属性,开展源-中间-目标模型的一致性检查、时序与逻辑性验证、概率性分析以及安全约束可满足性验证等多视角交叉验证.以自动驾驶汽车控制系统以及多域协同无人机控制系统为例的实际案例结果表明,所提方法提高了验证的覆盖度与准确性,增强了转换与验证过程的可追溯性,为复杂系统的安全驱动开发提供了一条一致且可证的技术路径.

    Abstract:

    In the development of complex software systems, achieving semantic alignment between design and verification is crucial for ensuring system reliability and functional correctness. However, heterogeneity in modeling languages, semantics, and data structures across design and verification tools often leads to semantic inconsistencies during model transformation, insufficient toolchain interoperability, and inadequate verification coverage. To address these challenges, this paper proposes a layered transformation and multi-perspective cross-verification mechanism based on a Unified Intermediate Representation (UIR). Starting from the design model, Systems-Theoretic Process Analysis (STPA) is applied to conduct hazard analysis and identify unsafe control actions, from which safety constraints are extracted and cross-checked against existing functional, timing, and safety properties. Subsequently, a mapping from the design model to the UIR is constructed, and the structure, behavior, timing, and safety constraints are formally specified within a unified syntactic and semantic domain. On this basis, we define layered transformation rules, together with traceability metadata, that cover the above elements. From the UIR, complementary verification models, such as temporal, logical, and probabilistic models, are derived, and the safety constraints produced by STPA are systematically translated into verifiable properties. We then perform multi-perspective cross-verification, including source, intermediate, and target model consistency checking, temporal and logical property verification, probabilistic analysis, and satisfiability checking of safety constraints. Case studies on both an autonomous vehicle control system and a multi-domain collaborative Unmanned Aerial Vehicle (UAV) control system demonstrate that the proposed method improves verification coverage and accuracy, enhances traceability throughout transformation and verification, and provides a consistent and provable pathway for safety-driven development of complex systems.

    参考文献
    相似文献
    引证文献
引用本文

吴梦丹,杨顺昆,侯展意,佘志坤,曾福萍,冀振燕.从设计到安全分析:异构模型转换与交叉验证.软件学报,2026,37(9):

复制
相关视频

分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2025-09-08
  • 最后修改日期:2025-10-28
  • 录用日期:
  • 在线发布日期: 2025-12-24
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号