Towards V&V suitable Domain Specific Modeling Languages for MBSE

Size: px

Start display at page:

Download "Towards V&V suitable Domain Specific Modeling Languages for MBSE"

Joel Dalton
5 years ago
Views:

Doctoral symposium, Nîmes France, 16 June 2016 Towards V&V suitable Domain Specific Modeling Languages for MBSE Laboratoire de Génie Informatique et d Ingénierie de Production Blazo Nastov 1, Vincent

1 Doctoral symposium, Nîmes France, 16 June 2016 Towards V&V suitable Domain Specific Modeling Languages for MBSE Laboratoire de Génie Informatique et d Ingénierie de Production Blazo Nastov 1, Vincent Chapurlat 1, Christophe Dony 2 and François Pfister 1 1 LGI2P, Ecole des mines d Alès, Nîmes, France {blazo.nastov, vincent.chapurlat, francois.pfister}@mines-ales.fr 2 LIRMM, University of Montpellier, Montpellier, France dony@lirmm.fr Modelling Complex Systems Model Based Systems Engineering (MBSE) Approaches for systems modelling Based on creating, manipulating and analyzing models Mainly, a model is A partial and incomplete, may be false but crucial representation of a system An argument for decision making processes 2 1

2 Problematic and Needs Functional / Behavioural models Performance models Requirements model Logical, Physical / Organic models Other models (Safety, Costs, Mechanical ) 3 Problematic and Needs Functional / Behavioural models Performance models 1) To create Domain Specific Modeling Language (DSML) suitable for modelling a system (multi disciplinary, multi views / aspects, ) Requirements model Logical, Physical / Organic models Other models (Safety, Costs, Mechanical ) 4 2

Problematic and Needs Functional / Behavioural models Performance models 1)

system (multi disciplinary, multi views / aspects, ) Requirements model 2)

(Verification), justifiability and relevance for expert s objectives

Mechanical ) 5 Agenda Background Creating DSML: things to consider V&V

3 Problematic and Needs Functional / Behavioural models Performance models 1) To create Domain Specific Modeling Language (DSML) suitable for modelling a system (multi disciplinary, multi views / aspects, ) Requirements model 2) Model V&V: assure model s well-formedness, coherence and conformity (Verification), justifiability and relevance for expert s objectives (Validation) Logical, Physical / Organic models Other models (Safety, Costs, Mechanical ) 5 Agenda Background Creating DSML: things to consider V&V strategies Contributions Conceptual Methodological Technical Case study Conclusion and Perspectives 6 3

4 Creating a DSML: things to consider Syntax Abstract syntax Concrete syntax Semantics Dynamic semantics (behavior): Translational semantics Operational semantics Action languages (Kermeta, Java, ) => Operations, methods, functions, Behavioral modeling languages (Statechart, State machine, ) => behavioral models Static semantics (Formal properties): Structural properties (temporal or not) Behavioral properties (temporal or not) 7 Creating a DSML: things to consider Syntax Abstract syntax Concrete syntax Semantics Dynamic semantics (behavior): Translational semantics Operational semantics Action languages (Kermeta, Java, ) => Operations, methods, functions, Behavioral modeling languages (Statechart, State machine, ) => behavioral models Static semantics (Formal properties): Structural properties (temporal or not) Behavioral properties (temporal or not) 8 4

5 V&V strategies DSMLs lack semantics: Guided modeling and Experts model evaluation DSMLs include semantics: Model simulation and Formal verification of properties Based on 3rd party approaches (M2M transformation) (+) Reuse of existing approaches (-) Information loss, relevance between the source and the target Direct simulation and property verification (+) Behavior and properties are directly defined on concepts, Simulation and property verification as early as possible 9 V&V strategies DSMLs lack semantics: Guided modeling and Experts model evaluation DSMLs include semantics: Model simulation and Formal verification of properties Based on 3rd party approaches (M2M transformation) (+) Reuse of existing approaches (-) Information loss, relevance between the source and the target Direct simulation and property verification (+) Behavior and properties are directly defined on concepts, Simulation and property verification as early as possible 10 5

6 An approach for designing V&V suitable DSMLs Contribution: a conceptual and tool-equipped approach for the design of DSMLs allowing simulation and formal verification of properties 11 Contributions 12 6

7 Conceptual contributions: overview executable, Verifiable and Interoperable Core: xvicore Promotes a formalized modeling lifecycle process based on several formalized phases and sub-phases xvicore : Meta language composed of three languages Object-Oriented metamodeling language Property modeling language Formal behavioral modeling language Conceptual contributions: overview executable, Verifiable and Interoperable Core: xvicore Promotes a formalized Phase I: modeling lifecycle process based on several formalized DSML phases design and time sub-phases xvicore : Meta language composed of three languages Object-Oriented metamodeling language DSML Abstract syntax (metamodel) Structural properties Property modeling language Language properties Behavior properties Formal behavioral modeling language Operational semantics specification Type discrete continuous hybrid discrete behavioral model continuous behavioral model hybrid behavioral model «instanceof» «basedon» «executes» 7

8 Conceptual contributions: overview executable, Verifiable and Interoperable Core: xvicore Promotes a formalized Phase I: modeling Phase lifecycle II: process based on several formalized DSML phases design and time sub-phases DSML run time xvicore : Meta language composed of three languages Object-Oriented metamodeling language DSML Abstract syntax (metamodel) Model Structural properties Model abstract syntax Property modeling language Language properties Behavior properties Model and Object properties Phase II.A: Model design time Formal behavioral modeling language Operational semantics specification Type discrete continuous hybrid discrete behavioral model continuous behavioral model hybrid behavioral model «instanceof» «basedon» «executes» Conceptual contributions: overview executable, Verifiable and Interoperable Core: xvicore Promotes a formalized Phase I: modeling Phase lifecycle II: process based on several formalized DSML phases design and time sub-phases DSML run time Phase II.B: Model run time Type xvicore : Meta language composed of three languages Object-Oriented metamodeling language DSML Abstract syntax (metamodel) Model Simulation Structural properties Model abstract syntax Property modeling language Language properties Behavior properties Model and Object properties Phase II.A: Model design time Formal behavioral modeling language Operational semantics specification discrete continuous hybrid discrete behavioral model continuous behavioral model hybrid behavioral model «instanceof» «basedon» «executes» 8

Methodological contribution: simulation mechanisms Observations Simulation or model execution requires the specification of behavior Multiple evolving concepts in a DSML Even more if considering

9 Methodological contribution: simulation mechanisms Observations Simulation or model execution requires the specification of behavior Multiple evolving concepts in a DSML Even more if considering multiple aspects conceptualized by multiple DSMLS Problem: coordinate all behavioral models from one or several DSMLs for simulation State of the art: The blackboard design pattern [Engelmore and Morgan, 1988] Control Process-1 Process-2 Process-N Blackboard 17 Engelmore, R., and Morgan, T Blackboard systems, edited by Robert Engelmore, Tony Morgan. Addison Wesley Publishing Company Methodological contribution: simulation mechanisms Objective: applying the blackboard design pattern in the MBSE context 18 Vandermeulen, E., Machine Séquentielle Interprétée. PhD Thesis University of Montpellier II, (in French). 9

Methodological contribution: simulation mechanisms Objective: applying the blackboard design pattern in the MBSE context o Schedules and executes behavioral models o Based on a simple execution

10 Methodological contribution: simulation mechanisms Objective: applying the blackboard design pattern in the MBSE context o Schedules and executes behavioral models o Based on a simple execution algorithm Read inputs from blackboard Calculate future state Write outputs into blackboard o and other original rules 19 Vandermeulen, E., Machine Séquentielle Interprétée. PhD Thesis University of Montpellier II, (in French). Methodological contribution: simulation mechanisms Objective: applying the blackboard design pattern in the MBSE context o Allows data exchange between behavioral models 20 Vandermeulen, E., Machine Séquentielle Interprétée. PhD Thesis University of Montpellier II, (in French). 10

11 Methodological contribution: simulation mechanisms Objective: applying the blackboard design pattern in the MBSE context Proof of concept: interpreted sequential machine (ISM) Advantages of ISM [Vandermeulen, 1996] Operates with typed data Separates state/transition from data specification Underlying structure based on the LTL (Linear Temporal Logic) 21 Vandermeulen, E., Machine Séquentielle Interprétée. PhD Thesis University of Montpellier II, (in French). Methodological contribution: verification mechanism A verification process requires: Formal specification (DSML syntax, DSML dynamic semantics, model) Formal properties (need for a property modeling language) A model-checking tool (need to reuse existent or create a new tool) Verification activities proposed by the xvicore approach Well-formedness of the structure DSML and Model structural properties Well-formedness of the behavior DSML behavioral properties Used property modeling language: CREI [Vincent, 2014] Reuse of existent tools Structural properties: rewriting CREI properties to OCL Behavioral properties: rewriting CREI properties to OCL 22 11

12 Technical contribution: current editors DSML design Syntax 23 Technical contribution: current editors DSML design Syntax Behavior 24 12

13 Technical contribution: current editors DSML design Syntax Behavior Properties 25 Technical contribution: current editors DSML design Syntax Behavior Properties Model design 26 13

generation library of EMF Generation of a simulation

14 Technical contribution: extending EMF We have extended the code generation library of EMF 27 Technical contribution: extending EMF We have extended the code generation library of EMF Generation of a simulation library 28 14

15 Technical contribution: extending EMF We have extended the code generation library of EMF Generation of a simulation library Simulation trace 29 Case study based on two DSMLs: EFFBD and PBD 30 15

16 Example : enhanced Functional Flows Block Diagram (effbd) 31 Functional / Behavioural model (dynamics of a system) Example : enhanced Functional Flows Block Diagram (effbd) 32 Functional / Behavioural model (dynamics of a system) 16

17 Example : enhanced Functional Flows Block Diagram (effbd) Flow (I/O, Trigger) 33 Functional / Behavioural model (dynamics of a system) Example : enhanced Functional Flows Block Diagram (effbd) 34 Functional / Behavioural model (dynamics of a system) 17

18 Example : enhanced Functional Flows Block Diagram (effbd) EFFBD abstract syntax EFFBD model 35 Example : enhanced Functional Flows Block Diagram (effbd) EFFBD abstract syntax Request: to define a behavior EFFBD model 36 18

19 Example : enhanced Functional Flows Block Diagram (effbd) EFFBD abstract syntax EFFBD dynamic semantics (for Function) Request: to define a behavior EFFBD model 37 Example: Physical Block Diagram (PBD) Model of architectural composition (the physical components of a system) 38 19

20 Example: Physical Block Diagram (PBD) Model of architectural composition (the physical components of a system) 39 Example: Physical Block Diagram (PBD) Model of architectural composition (the physical components of a system) 40 20

21 Example: Physical Block Diagram (PBD) Model of architectural composition (the physical components of a system) 41 Example: Physical Block Diagram (PBD) PBD abstract syntax PBD model 42 21

22 Example: Physical Block Diagram (PBD) PBD abstract syntax PBD model Request: to define a behavior 43 Example: Physical Block Diagram (PBD) PBD abstract syntax PBD model PBD dynamic semantics (for Component) Request: to define a behavior 44 22

23 Dependencies between effbd and PBD physical components of a system perform one or more functions, in the same ways, functions are allocated to a component EFFBD model PBD model 45 Dependencies between effbd and PBD physical components of a system perform one or more functions, in the same ways, functions are allocated to a component EFFBD model PBD model 46 23

Dependencies 2) Behavioral Dependencies 47 Phase I:

24 Dependencies between effbd and PBD physical components of a system perform one or more functions, in the same ways, functions are allocated to a component EFFBD model PBD model 1) Structural Dependencies 2) Behavioral Dependencies 47 Phase I: DSML design time and DSML property specification EFFBD DSML PBD DSML 48 24

25 Phase I: DSML design time and DSML property specification EFFBD DSML Structural dependencies PBD DSML 49 Phase I: DSML design time and DSML property specification EFFBD DSML Structural dependencies PBD DSML Behavioral dependencies 50 25

26 Phase I: DSML design time and DSML property specification DSML structural property: The quantity of a Resource that a function provides or requires for execution must be positive or zero is specified as C T R E [ f Function r f. resourceflowinput r. requestedquantity 0] C T R E [ f unction r f. providings r. providedquantity 0] DSML behavioral property: If a component enters a breakdown state (internal or external), its functions will be unable to continue execution C c Component c. State = SS OR c. State = ES R E [o( f c. performs f. State Execution)] 51 Phase II.A: DSML run time Model design time and Model property specification Design models 52 Design model structural properties: If the AI unit is alerted of an ongoing threat, it must send a report to the surveillance center, even if this threat appears not to be an incident C [AIUnit. mission. getinputitems Fire detected OR AIUnit. mission. getinputitems Flood detected ] R E [SurvCent. mission. getinputs( Situation report ) ] 26

27 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 53 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x

28 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 ExternalBreakdown 55 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x

29 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 57 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale SuspendFunction x x+1 x+2 x+3 x+4 x

30 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 59 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x

31 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 ResumeProduction 61 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x

32 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 63 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale ResumeFunction x x+1 x+2 x+3 x+4 x

33 Phase II.B: DSML run time Model run time Detecting Fire Execution Suspended Fire Detector Producing External Stop Global time scale x x+1 x+2 x+3 x+4 x+5 65 Conclusion and Perspectives Research focus Modelling Complex Systems Contributions An approach for the design of DSMLs and models Simulation mechanism Specification of properties and their verification Tool support Tool for the simultaneous design of DSML s syntax, behavior and property specification Modification of EMF metamodeling editor and code generator Tool for simulation and property verification Case study effbd and PBD Future works Continuous and Hybrid behavioral models 66 33

34 Papers 2014/ B. Nastov, F. Pfister, Experimentation of a Graphical Concrete Syntax Generator for Domain Specific Modeling Languages. INFORSID 2014 B. Nastov, Contribution to model verification: operational semantic for System Engineering modeling languages. CIEL 2014 B. Nastov, V. Chapurlat, C. Dony and F. Pfister. A verification approach from MDE applied to Model Based System Engineering: xeffbd dynamic semantic. CSD&M B. Nastov, F. Pfister, Vers la génération des syntaxes concrètes graphiques pour les langages de modélisation métier. Revu ISI, 20 (2), B. Nastov, V. Chapurlat, C. Dony and F. Pfister. Model Verification & Validation and Model Based Systems Engineering: towards executable DSML. INSOCE Magazine INSIGHT 67 Papers B. Nastov, V. Chapurlat, C. Dony and F. Pfister. Towards Semantical DSMLs for Complex or Cyber-Physical Systems. ENASE B. Nastov, V. Chapurlat, C. Dony and F. Pfister. Towards V&V suitable Domain Specific Modeling Languages for MBSE: A tooled approach. INCOSE IS

35 Thank you for your attention Questions? 35

Blazo Nastov. Journée des doctorant, Nîmes, France 19 June 2014

Blazo Nastov. Journée des doctorant, Nîmes, France 19 June 2014 Apport de l Ingénierie des Langages de Modélisation à l Ingénierie Système Basée sur les Modèles : conception d une méthode outillée pour la génération de Langages Métier interopérables, analysables et