Software Engineering with Formal Methods: The Development of a Storm Surge Barrier Control System - Revisiting Seven Myths of Formal Methods

Jan Tretmans, Klaas Wijbrans, Michel Chaudron

    Research output: Contribution to journalArticleAcademicpeer-review

    18 Citations (Scopus)
    60 Downloads (Pure)

    Abstract

    This paper discusses the use of formal methods in the development of the control system for the Maeslant Kering. The Maeslant Kering is the movable dam which has to protect Rotterdam from floodings while, at (almost) the same time, not restricting ship traffic to the port of Rotterdam. The control system, called BOS, completely autonomously decides about closing and opening of the barrier and, when necessary, also performs these tasks without human intervention. BOS is a safety-critical software system of the highest Safety Integrity Level according to IEC 61508. One of the reliability increasing techniques used during its development is formal methods. This paper reports experiences obtained from using formal methods in the development of BOS. These experiences are presented in the context of Hall's famous “Seven Myths of Formal Methods”.
    Original languageEnglish
    Pages (from-to)195-215
    Number of pages21
    JournalFormal methods in system design
    Volume19
    Issue number2
    DOIs
    Publication statusPublished - 2001

    Keywords

    • FMT-IA: INDUSTRIAL APPLICATION OF FORMAL METHODS
    • Industrial application of formal methods

    Fingerprint Dive into the research topics of 'Software Engineering with Formal Methods: The Development of a Storm Surge Barrier Control System - Revisiting Seven Myths of Formal Methods'. Together they form a unique fingerprint.

    Cite this