ANTSS Analysis Tools for System Surety

ABSTRACT: This project, Analysis Tools for Software Surety (ANTSS) will improve both requirements management and program analysis tools for critical software development and V & V. First, building from existing products and technology, GrammaTech will construct an integrated tool suite of program analysis and test management tools: checking compliance against software coding standards, checking for safety and security programming flaws, verifying software against formally expressed requirements, managing automated test execution and generation, and measuring test coverage. Tools that exist for C programs will be enhanced, adapted, and integrated, as needed, for the critical-software domain. Corresponding tools for Fortran programs generally do not exist and will be designed and prototyped to provide analogous functionality. Second, the requirements tracking and change management tool chain will be enhanced with automated consistency and change checking, based on a SysML infrastructure. In particular, we will connect formal verification tools, which are currently not integrated into requirements management processes, to other requirements management tools. The result will be an integrated tool suite that provides better requirements and test management and contains improved tools for C and Fortran program analysis, enabling engineers to be more efficient and more accurate in creating and certifying critical software. BENEFIT: The project will generate these new capabilities, as assistants to human creativity and insight in producing critical software systems: - The ability to automatically trace requirements and manage change across the application life-cycle tool chain, including into software coding and formal verification - An integrated suite of tools supporting program analysis and test management for both C and Fortran The effect of these capabilities will be more efficient and more accurate development and V & V of critical software. The immediate customers for the project are organizations performing nuclear-critical software development or independent V & V; the capabilities are equally beneficial for any safety- or security-critical software development. GrammaTech will integrate the technology resulting from this project into its current program-analysis product line and market it to its existing and new customers developing embedded software systems.