# Research Infusion 2008

# Tool or Technology Information

**[Contact Information]{.underline}**

Name of Tool/Technology: Safety-Critical Application Development
Environment (SCADE) Suite

Name of Technology Provider: Esterel Technologies, Inc.

Primary Point of Contact (PPC): Tony Karam

PPC Phone No.: 230-910-3993

PPC e-mail: <tony.karam@esterel-technologies.com>

Alternate Contact Name (APC): Ed Marut

APC Phone No.: 732-859-1212

APC e-mail: <ed.marut@esterel-technologies.com>

Technology Provider Website:
<http://www.esterel-technologies.com/products/scade-suite/>

Technology Provider Address: Esterel Technologies, Inc.

100 View Street

Suite 208

Mountain View, CA 94041

USA

**[Tool/Technology Details]{.underline}**

Description of Tool/Technology: Safety-Critical Application Development
Environment (SCADE) is a model base development and auto code generation
environment which contains qualified development tools and verification
tools to either automate, simplify or remove all together the costly
validation & verification activities required by the DO-178B standard.
The development environment of SCADE has been designed from the
beginning for the development of safety-critical software. SCADE has
been used from the start on a commercial and military basis for the
safety-critical software such as avionic control (Aircraft Braking
Systems Corporation, Lockheed Martin, Airbus, Smiths, and Goodrich),
nuclear plant control, and railway switching systems. SCADE has
successfully been audited by the Federal Aviation Administration (FAA),
European Aviation Safety Agency (EASA), Transport Canada and Civil
Aviation Administration of Israel (CAAI). SCADE addresses the
applicative part of the real-time embedded system. The application
portion is usually the most complex and dynamic aspect of the software,
containing complex decision logic, filters and control laws. To address
these complex applications, SCADE Suite's qualified development and
verification toolset is utilized to achieve 40-50% reduction in costs,
and increases in quality and productivity while reducing cycle times by
3-4 times.

Commercial or Research Technology: Commercial

Associated Program:

Potential Benefits: The SCADE Combined Testing Process shows how to
apply the SCADE Certified Software Factory concept to achieve the
success that several avionics companies achieved. Success such as:

-   Remove the requirement to perform low-level unit testing (MC/DC)

-   Remove the requirement to perform source code review

-   Qualified tools to perform Structural Coverage of the SCADE mode

-   Remove human coding errors

-   Immediately improve the quality of the system

-   Improve cycle time for design changes by 3-4x

-   Improve time to market by 40-50%

The SCADE Certified Software Factory establishes the idea that SCADE is
the centerpiece of the software development cycle. The objectives of the
Software Factory project are to facilitate the integration of a complete
software development environment made of a variety of tools
(proprietary, COTS, Open-Source, etc) and to guarantee a perennial
status to the set up of such frameworks and to the applications that are
developed on top of these frameworks.

The approach in DO-178B is based on the formulation of appropriate
objectives and on the verification that these objectives have been
achieved. The DO-178B authors acknowledged that the objectives are more
essential and stable than specific procedure, thus allowing developers
the freedom to meet the objectives with various methods, techniques and
more importantly tools.

The SCADE Suite tools, used in the Combined Testing Process, are
developed and qualified as tools to meet the objectives of DO-178B. This
section reviews the DO-178B objectives tables with respect to meeting
the objectives with SCADE suite.

The DO-178B software development processes are composed of the
following:

-   The software requirement process produces the High-Level
    Requirements (HLR). The HLRs can be defined in SCADE as high-level
    design architecture.

-   The software design process produces the Low-Level Requirement (LLR)

-   The software coding process produces the source code and object
    code. This process is now completed with KCG.

-   The integration process produces the object code and builds up to
    the integrated system or equipment. This process is outside of
    SCADE; however CVK is used to verify the compilation process of
    SCADE generated code.

Overall, the SCADE Combined Testing Process enables developers to verify
designs early in the development cycle when errors and defects can be
fixed more effectively and efficiently. The SCADE Combined Testing
Process assures a level of confidence on the software safety that is
equivalent to or higher than that achieved with extensive testing on C
code with 100% MC/DC coverage of Source Code, while significantly
reducing costs and time to market. The SCADE Combined Testing Process
optimizes the testing effort thanks to SCADE built-in qualities.

**Step 1:** Compliance of the SCADE model with respect to the High-Level
Requirements (HLR) is, to a large extent, verified at the model level
with Model Test Coverage (MTC). MTC is qualified as a verification tool,
per FAA 8110.49.

**Step 2:** Compliance of the C source code with the SCADE Low-Level
Requirements (LLR) is ensured by the Qualified Code Generator (KCG)
development tool qualification, per FAA 8110.49.

**Step 3:** The formal and structured characteristics of KCG-generated
code enable the efficient verification of source-to-object-code
transformation with the Compiler Verification Kit (CVK).

Supported Platforms: Microsoft Windows XP

Required Inputs: SCADE software models can be manually described within
the SCADE model editor. In addition, the SCADE software model can be
automatically translated either from Simulink through the SCADE Simulink
Gateway or UML Rhapsody through the SCADE UML Gateway.

Outputs Produced: The output of the Qualified Code Generator is a simple
subset of C Source Code language. The source code generated is
independent of any source code compiler and target. SCADE can also
automatically generate the Design Report, Model Structural Coverage
Report and Simulation test results. In addition the SCADE model itself
can be imported into any requirement management tool for traceability
analysis through the SCADE Requirement Management Gateway.

**[Maturity Level]{.underline}**

Applied to Real Problems? Yes No

If Yes, Level of Success Achieved: SCADE is currently being used in the
United States on 11 different projects, 3 evaluation programs and 1
research project. SCADE has been audited by the FAA, EASA (European),
Transport Canada and CAAI (Israel). SCADE has been deployed on programs
with Boeing, Airbus, Lockheed Martin, and General Electric (GE).

SCADE success stories can be found at:

<http://www.estereltechnologies.com/technology/success-stories/>

Already in Use within NASA? Yes No

If Yes, at what center(s):

**[Support]{.underline}**

User/Ref. Documentation Available: Yes

Phone Support Available: Yes

Is Tool/Technology Developer willing to support infusion effort? Yes No

**[Licensing]{.underline}**

Is Tool/Technology Developer willing to provide Evaluation Copy for
extended period of time? Yes No

**[Other Information]{.underline}**

The SCADE Evaluation process defines the objectives of the SCADE
evaluation and the success criteria to be observed at the end of the
evaluation. The typical SCADE evaluation objectives are as follows:

-   To show the ability to capture system high-level requirements
    allocated to software

-   To show the ability to develop software low-level requirements

-   To show the tools and features offered by SCADE for the
    configuration and traceability managements

-   To show the automatic code generation using the SCADE qualifiable
    code generator

-   To show the SCADE combined testing process for performing the
    verifications of the outputs of the software development process as
    required by DO-178B

> Esterel offers a time limited evaluation license with the agreed upon
> technical objectives to measure the tool against. Esterel also offers
> a business solution to address a long term evaluation program which
> includes training, support and licenses.

Currently the United Space Alliance (USA) in Houston TX is reviewing and
evaluating the SCADE product for their activities on the CEV program.
The following URL references a white paper, written by the USA, that
describes the SCADE and model base development benefits to the space
program:

<http://www.esterel-technologies.com/files/automated-production-of-flight-software-for-space-exploration.pdf>