3 WhyWe Need
Model-Based
Analysis
This chapter demonstrates why we need model-based analysis.We exhibit a program
with design errors that cause safety violations (where the program reaches forbidden
states), deadlocks (where the program seems to stop running and stops responding to
events), and livelocks (where the program cycles endlessly but can??™t make progress).
We preview our analysis and visualization techniques and show how they can reveal
the design errors, even before beginning any testing.
3.1 Reactive system
Suppose we are developing a process control program that runs on an embedded
computer connected to sensors, timers, and a supervisor program (Figure 3.1).
The temperature monitor discussed in Chapter 2 could be a component of this
system; here we consider a higher level of integration. This is a reactive system that
responds to events in its environment. In this chapter we consider just one of its
features: the temperature-calibration factor. The controlled process depends on the
temperature. In order to control the process accurately, the control program must
obtain a temperature reading from a sensor and use it to compute the calibration
factor. The calibration factor is then used in subsequent process control computations
(which we do not discuss here).
The temperature in the process can change continuously, so the control program
must sample the temperature often.
Pages:
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68