!"#$!

%

#$&"#'
(()*+,

	
	
	



NASA STI Program . . . in Profile

 -!".	

/"" "

"0 *-! "   1

(	

 - "  -*%('&

*,	

*

*1

(	

('*!"

! - 
-'-*2-- 1'

  .3.0"- 0."

"*	

4('1(	

('*

0" 	

! " 

#/"!/ - .	

(  

0.!0"-

  -! "   ('

+"1!!/"/	



 "/	

	

('

.+  !"-+5

(
6	'

$78$'

('2	1-

 *" *9- 

- !-	



*" !":0"

 1' !"*-

-  - "  ""

-*"*"/-!

- 0!1	

!-

0+"-*-./!0

**! 

":- 1

(
6	'

$2
	#71 - 

"  -"*-

 3".11.;! ,.

+,."//

**1#:0

1


2	(

(22(1 - "

  -"/	

"

  "1


2	)	
78$'

('2	1
 "

-* - "  

 - .*.*.

*""/	

1


'
$78$'

('2	1 - .

  . -*-*	



*.9 ."*.-

  "+!/9 0!/

!/ 1

(
6	'

$(
	$
('2	1

!-- - "

  *	

4*1

 3"0  !"!*

!./!"!*3""/."

3"!/ !1

)*-*/!	

('

*.-+5


 	

('**

!""###			$

*!;!0'

<110

):!;!	

('6#,

=>>?=

	

('6#,

=>>?

@5

	

('6#,

	


- '-*

>""#0

60.#A=
	! "

 "*

$ 
"-$ 


6*.B=A?!"
 		$
8=(





	








  !"#$!

%

#$&"#'
(()*+,

	
	
	



Available from: 

NASA Center for AeroSpace Information 

7115 Standard Drive 

Hanover, MD 21076-1320 

443-757-5802 

The use of trademarks or names of manufacturers in this report is for accurate reporting and does not 

constitute an official endorsement, either expressed or implied, of such products or manufacturers by the 

National Aeronautics and Space Administration. 
Table of Contents 

1 ""+#$"#'
(111111111111111111111111111111111111111111111111111111111111111111111111

11 
  !)*+,111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

11 '*#$"11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111=

1=1 #'
("11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

1=11 
 1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

1=11 
  "111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>

1=1=1 "1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

1=11 "+'-! 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

1=1>1 "*111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111A

11 #'
(11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111?

111 
 11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111?

111 3111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111?

1 
-'#  !1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111

=1 $""1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>

1 
 !11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111?

>1 - 1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111


1. Error Modeling and Analysis with AADL and EDICT 

(" !*/-#'
(-*""

++*""-"  !C#$!%

#$&1

@" !!: !#'
(/*"- /

 '""#- "/%'#&  !!"/

2 8!%287&18": +"+* !/!*"/"

" ;!-*""-/*!  !1

1.1. Architecture Framework 


"! ""/;!/0!0!"0"*

+ *"0/*""/;!*1("/

-*+, "-0-

/ "+0

"! -"

0/0!"

 **-"1(#'
(

   !-*+,

/0-/ "

/+01(#'
(

  !-*+,"--00-

/ 5

Meta-Architecture

'"-0  !

. .*"

!/! 1

Conceptual Architecture

'"-" *"

0!-!0 -

  **! -! !1

Logical Architecture 

'"-""/!--! 

/"0""""

 - -- " 1)!5#'
(  !

System Architecture Framework 

'"-+-! +/3"-+% .". 1&"

"+-*% .+,. 1&+-+1

Component Architecture

'"-""! !"- - -+*

(0-/ *09 $ "*  !

0.0+""/#'
(6" !1

(*""" /""*  !1

(#'
(!**--*+,"!-**

/!/"-  !*" / .*

*"- .""-"+*"1#'
(!- 

3*"  !-*+,""--*""

1

(#--/ 0/-*".3""- 

 /!"0** - !*1#--*"-

*
"**""3/!%
"

1)!5#'
(#--"2( " #---

  !*"+  !-*+,1(*""/ "

/ 0" ++0*"+"0"-**"

-*+,1

)!5#'
(#--"2(


#2"-
"0*;!*-*/

"0"1("*"--*".3"- "

+#--1')!#2"1#2*/

Arch

Core

C1 C2

L1 L2 L3

S1 S2 S3 S4 S5

Arch

Core

C2

L2

S4

Meta

Architecture Level

Conceptual

Architecture Level

Logical

Architecture Level

System

Architecture Level

Architecture 

Model

Abstraction Level 

Relation
=

!"!*/-"--+D! *""**"*""

 *"01

1.2. Importing AADL Models


#$*"*/0"-*  !-*-#'
(1#$ - 

"*"- -*-*#$#'
(41

(!*  !*"*"/#'
(4  !"0 %
&.

+ *,*"0/"-*
*"*3.

+1  !*"-!+ #'
(

  !*""-*+ ""*"1(0":-

*"" "- "**-  !*"

 -!1)!= !!/+#$*".."

#'
(1

'9 +0"0"*"-=:='#  !!:*

0!*""/1(  !"0 !"

*'#*"#'
(-""*""1

)!=5
 !B+-#$"(

1.3. EDICT Error Modeling 

1.3.1. Approach 

(--*"-* !./0-

**0""*/-  !1

#'
("-! !--*-+ -"5 !

"-+!**."* *0" "*

-- -+ !1 - .:" *"!"!*! !

  !*"+  5

1 Error Semantic

(*""-- - !+ - 

*-,1(* "-/"

"-"
!*3/)!-- "E>F1

1 Component Error Descriptors

(*""--* *-*0-*

*1 "  * +*"- ! %

*-//+ !&." %*.. 1&1

=1 Component Error Model

(*""-  - - **  !

*"1(*"**.-/ - -*

  !*"+ *"1( *":"

+"* -  / "*""-1(

 "*-G:/"G" /*-*

 *1(-
*# *"%/0&!*"+

-"**-++ *

*!+"*1(-*" .

+ *"+$
*4!- "-! 

!"-*%-&"!/;!1

1 Error Mitigator

(*""-* */-" "%11.=+

0.

 ,.0! ,&1(*""--

* *" "-* /"1

>1 Component Error Mitigation Model

(*""--0*-* -"

-! 1(!  !"!- "-! 1(


*"+""*

   !*"1>

A1 Influence Relationship Model

'-! " /0+ * !!-

*H:%"*4 " /"- &1(

*""--! -*  !1'+*5

-"----! "-"0"! :

*1("---!  !"-*+ *:

! -! "-*+ */-! "1-! 

-"-"*//"/+-** 

 -"! ""*1

(*"0/**"!3 ")*+,1()- +

--*"!I$/""-"!*

 /!J0*"1

1.3.2. Error Characteristics Modeling 

(#'
(! "- -*"" /"/01( 

"0"!- +!*!-*""

 *+*-  !*"0/*"-*#$1


 !-* "" ")!1'*.*

!-+,/!-* *"% "*-&.+0"

!! !"+!0"*"" -"+!"

/"1

)!5* "

(#'
(0"-"-"* !**" 1	+

* */"-"""""/!"" - "-  !!"

1(*/-"-!* "!"-"* !A

* &+ !"/-"-*  "

** *  1

(
*# %
#&"0"*"-"--* 

 /"  !*1("*!".+-+

)!>1(0"!**-" //!""

" 1)*.+" */"""1@G	+

# G/!".+" """""1)+."

!* 0!# 1

)!>5# -
*# "


 !-# ")!A1(0"

+! * -" ."0"""

  3- " ! -1

(
#*""- - -**/!"-

"-
*"%" !":&1(!"*

*"-*!"/!":  +/1(!.-"*"

   -0-*;!*"- .*"- */-*"

 1(!* "**"0/
*"!

*"-"
#*"/-" /  -*-

 "1

)!A5# -
*# "

("""" "
*"%
&."-  -

 - **  !*"1(*"**. -

+ !"/"---"1(-%+)!&!

 - -*  !*"+ *"1( 

*":"+"* -  / "*"

"-1)*+",+!" 0:0"

*- +"1

( "-
!"/""---G:/"G

" /*-**1(:/" - -

 "
*# *"%)!?&!*"+-"*

*-++ *!+"

*1(G2!!
K+! "-!/-!!

0+  - ,"--**+1?

)!5
".G!**G

)!?5
".G:/"G

(--
"-"!"" .+ 

*"+$
*%" 0!- ." !

-! &!"-*%-&"!/;!1(G(-*"

G-
"" ")!1

(-*/0"-"!-!0-- -

*!!1("-!!- -! ++ +,1

)! .-*-*"* "-"1(* " /

,"--+ -*/ -"1(!* 

"!- !!- -!  -"1) !!!

*/ - * .* +"*.1(

!*"-"-!!"--*/0-0

 - "-":!1'-!!."+0"!*

 //+-*+*"//  -

-*1(""-// "++-"0*-  

*-*"-- 1

)!5
".G(-*"G

1.3.3. Error Mitigation Modeling 

("%&"-* */-" "

1** **/=+"0.

 ,.0! ,1

(
*"%
&"--0*-*H

** * -"-! 1'!- "

'


!"!1'-! " /0+ 

* !!-*H  !:%"

 *H" /"- &1

)!5".G# G

("+!"- - ** *

" "* *!"  !1)!" --

".+ +!0":!" -* */*""1

(# %)!&0"!+/"-

* * */-" 1("   - !

* */-!" /"/"* %+" "&.// 1

)!5".G# G

((0"!+/"-* 

-!""/* *1 -"")!1	+

 !!*+"* 1
0""7'-!

*0* /+"""1%	./"-!.,+

* -"D!*!: ""* "

 1&


+
*# *"".* -*+ !*

  "-*G/G-* 0/"1!""*0

* -*/.,+-* *" "

-0*1'"".,* .

!-"-"** *-*** */*/

- "!/;!*"-"-! !1

)!5".G(G

(
"+**"*!*""1)!= -


* -"+ +#'
(! 
+

  !*""!**-** *!""

/ "*1

2 *  !*/ ".**/""

! !-**-- -*1

*"* -"#*(/"/ "!

,""-
* !//*-

"1=

)!=5
".G
* G

)!+#*-
"1(!- "

! ! -! -*"**"

-""1(! "*""* /" - *+

 "."!+-!!
* ""--

 *1(:0!
*"+! !-

*H  !1

)!5
".G#*G

(!/ ! """*0*!-

 "1(-+"#*!*

""- "! "0/-*"

*/-9 1("0"-/!""*0*-*

! 1

( -*/ *""*1(%


!"" /-*-+ */" 1) .-

   "!"   ,%

&*""./" " 

 !*/++

"+"" -



 ,* *1***/"""*0"-**

* *H ! "1(* */!"0"

"" ! " - 3/-"*+

*/-" "01

1.3.4. Error Modeling with Influences 

('-! "%'&+ - --! /+ 

**"! */* 

- /++*1(-*- :  !

 ! %-:*./"/+ "" "**&

0*-! /+"+*-**

0*1

('"**"*!"++5-"--

--! "- -"0"! :  !!"

1'-! "-! -*  !*/ -"

"1)!>!'-! (.+ -:-! 

""*/""*0"."+*/"1*/"

+*"" ."-*//! "

"* "-*-0/1

)!A!'-! .+ -! -"-"

*//"/+/*1@-!  "

.*+ !""-0"! *-

-! 0/- 1@-! "! *0/

 ".0/"*-" "-0""

 *--! 1-"**/ ".-

-! :/+! *" -"*1>

)!>5'".G'-! (G

)!A5'".G'-! GA

1.3.5. Error Model Management 

(#'
((!0"*"-*-"**"

"" //0-*1(6" "0"

 +-*" "+  !*/*"

-*1("0"-! -.""-!-*"

+"!/"*"0-1

(6" "**"*!"+5-

 
*"%
&+**.- 
*

"%
&+**."- '-! 

"+ "*  !*"1

)!!-
 1**/ "-**

-0+ !1'-*
:- "*.*/

 "!!1( "
+/ "+  !

*"!*-*0/"31**/

""0
 "+13"-""*"/

3-!1(!*-+
"- "


1' 0+" 0- !-*4
 -

"1 *" "0- ,-! !-

*"+ "! "*"0"1' !"!0+

!/*++""+/ "1

)!5 ".G"G

(!!*-!+)!?!* - 
+

 *1(!* +5&"L	
K-*

"!- 
.&+-":
!""

 *  !- +/1(!!*-!0"+

3/  !*"+!;!!-! -*"-

-  !*1(!-!+-* *"0*"

1(-!"- --
 " --


 1

)!?5 ".G
!
!*
-!G#!

)!+-6" "-'-! "%'&

 1("-'! "+*  !*""

0- !-'1)*!'*/"".+'

*/".:'*/ "1

)!5 ".G'-! "G?

1.4. EDICT Error Propagation Analysis 

1.4.1. Approach 

(#'
("0"/ 

""*  !*:!"--* /"-*

 *"**"1(-*" -"-"

 *:/."-+ 40- -! 

.*%" &."-* *1


 - - -*.-:/"- 

 *%*!/!/-:/" -"
*"&."

-! %!/-!!*"/!! 
*

".-&- *-*+ +1'-* 

  !-*.*-* "!".

"-* ".-*"1(* !-*

 /-*"!- !! 1( !.

 !- .!!0/-+"-

* 1

(!-*!+  0:!- 

 *0 . //-:/.*.-*.

"* !"-1(! !**- *.

 -*  !."-/+  * 

 " -- "*1

1.4.2. Error Propagation Analyzer 

(3%
&---! 

"--*":*!1)!+-!

1!*/-*0
*""-"*/ "-*

*  !"*! 1@* ".:/""


*"*/-"/ -!/-1) -.

! -*%- -! &"."*

/ "-!! "-"
*"- !

-!! * 1

(3+*"-5	*"* 1'-	**"

 ".+-
*"* *-*

 !"1'-* *" ".! +/"./!

+!!+!** !-

!""! +!-*1

)!5
".G
-!G

)!+!-!1(0+ -

!!*  !-! 1
*"- 

  """ +- *"%"&"+

 */-- "/%"&."%&." "%+&1(

+,-*! -!"

 */!"1'-*!*  "! *

 - -* 0""*1

@*"* ":!!**%""&

-* 0"*1) * **"

! -+1@*  -*#"%/*

&"""! -* +" """-/

+* *1

)!5
".G!G.L
!K(/

)!!6-!1(0++/+ 

 "*  " "*1(*;! ,"!"-

 -  !*1("* "",*  !

"*!0+"""" -! 

"0"0!" --*1!0:- ""

"*0";! , -** 00""*

 !"1(:*" ++-*



' ("-)* 12" "/!

"%+*&"/-*"+


' ("% * &1("* *!0"

0"*" -1

)!5
".G!G.L6K(/

)!=+$-!1(+

/* !"+: !-31/*" !"

/ -: "
*""*+

*"1

)!=5
".G!G.L
$K(/

2. Analysis of the SPIDER Architecture 

'"0!*""/-#'
(+0! "

*""-*"=:="  !1(--!"



#$*""0"/*!"--12! "8" 

 "" "*""-+!287

  !1(*"-*""-+!*287*

 3"""1

@"0"*"-8!'- 7%8'7&."!" *7%7&

" *%&1(*"+!"! -+

"!  !/"8" "-+1@+/0!

/-#'
(: "/0"*

/0"-" 1(! ""-0!

"*"*.+/** "** "/!1

)!8'7"

)!+*"-8'7+"0"#'
(
*"

"1(* 0/*-!*"! -"**:! 

B!** "** 1(+)!

* */"-*8'7" "+8" 

 1(+/-"":""0"0*"-9 1**"

+"0"-"71=

(**"/-*"-*

 *+0+ "/*""

 *1)!> !-*-*/
*

""-8'71("/+"---*!" /

/+* 0*!"* 

"!-*1

)!>8'7(-*

(!" /-*/0"!--+!*1

@0"0"-**"-8'7"7*""""

-+8"  1

@!" ;!*"*287!-*"+*"-

!-" 1#'
("0"" /-

.+0"-"""* !"

287"! *"-++" /" !"1(

 ;!!-!/ !!"-+--- -! "+

"+*" "*"*1

*+"0"" "  -


**! .'"
 ,-*"287-8" 

 1@0"0"-*"""*8'7"7

 *!
*"/#'
(1)!A

+*0/""8'71(/


**! 
 ,.'
 ,"
$ ,8'7-*1

)!A8'7

@*" +"! "-!.8'7

"7! 1(0!*-"

"*-+ "8" "-+"*

* *0/""287*"1

)! -*:*!8'7! -1(

+0"-* "+0* *1*

" """+/* -*-*.*"

/ 08'7+"!  ! 01(

3!0!3-- - * 

!1

8! 0- +0!287*" *

! ++/"0--8"  

/0-287+:"+0"-"1(-!-!

+287*  !*"0-/ 1>

)!-*

3. Layered Error Modeling

8"!-!287  !+/: -"

*""-  !*!0-/ 12!-- "

!287*"*"."-

""*"-
*"
**"

  -/!+1(*"+"+*

   !: " 2871(-+,

"0 -"* *0-/ 1


"*-/ +*""+)!?1(+

0+""  !-287-'#  !1"

**"+"0""+-*"+,

  !*"1(!-+!"/!""*

*"-287* $  !"1A

( - !	+,  !0"*0

  !*"! *! 

  !*"+! 1
 /+*"- "/

!";! 0**-*"/ 1(: +

-*"*!0-/ 0"- /+

*"0!01(/+-/-*"00-

/ +!!*"*""*"19 

++0!*" ;!";!"!* 1

)!?$""


/" : +*"" $!2878" 

 : 0!/+-1(""-0"*

* *"! "."287+"-

0!-0-/ 1+-*"

0!-- 0- *+*/"+

*/-2871)! -*

+/" 0 *1

)! $?

4. Conclusions 

2!+,*""+#$"#'
(!

+!-*"""-/*"

0"0+*"" ;!!"/*0"0

*12!+,!"#$ -! !-*!

  !!""!"#'
(*"!*! !+*"-

* .-*." "*1

!-!:-*""0!"--*

! *1(/0!/ "

 *-"0"!/0-**" 0*

  !1(/*! !-!-" 0"*/

-0* !1'**"+ - -: "/0

%! -,+""-"0!&"0"

+0+-0-*"*  01("**/!/!

-D""-0// !*/!

/+-- -*! 1

6  *""/ *"+"/"0""";!"0-

 *:*"*1(0!-  - "!"

-+*  !;!0+"/"0""

**:-*"1(*"*!/*/! "" /+

: "/*"1*!/!"0-

   / 0"*"*!/"0" "*,

0!01

#!!-+,+0"*"-!"-"

+!"- -""/  !1(-!- !/*/

/0 - -*+ - -*1
!*""

*""9.-" -/0 -  -

 1(+-!"/!/#$*"/"*"

 /-#'
(1(-+*- ++""

9 *0-+"5

 "*"-*/0 -*!-!1

 """-+/0-  !1

"-- /0"*" 0

" 0"!+ /0"0*1

(/+*/0 - "/0 - 1

5. References 

EF(*.@1.,!.1.".1.L2875)!(8" 


**! *K.	

(>=>.$ 
.6*.B
1 

>1

EF(*.@1.,!.1.".1.L#-  -

287
**! *K.	

(>==.$ 
.6*.B
1

	0*/>1

E=F).1.M! .#1.6!",.J1.L(  !C#$!%

#$&5

'"! K.
7'A(	.)/!A1

EF).1./.J1.@.$1.L@4	+B-  !C#$!

""K.
7'?. 1

E>F
1J1@."	1!.G(
!*3/)!"-#"/#/!"*.G

J!-( 
*!  .B!*.'!%J!=&1REPORT DOCUMENTATION PAGE Form Approved

OMB No. 0704-0188

2. REPORT TYPE 

Contractor Report

 4. TITLE AND SUBTITLE

Error Propagation Analysis in the SAE Architecture Analysis " Design 

Language (AADL) and the EDICT Tool

Framework 

5a. CONTRACT NUMBER

NNL10AB32T

 6. AUTHOR(S)

LaValley, Brian W.; Little, Phillip D.; Walter, Chris J.

 7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES)

NASA Langley Research Center

Hampton, VA 23681-2199 

 9. SPONSORING/MONITORING AGENCY NAME(S) AND ADDRESS(ES)

National Aeronautics and Space Administration

Washington, DC 20546-0001

 8. PERFORMING ORGANIZATION

 REPORT NUMBER

10. SPONSOR/MONITOR'S ACRONYM(S)

NASA

13. SUPPLEMENTARY NOTES

This report was prepared by WW Technology Group under subcontract to Honeywell International, Inc., Minneapolis, MN, 

underNASA contract NNL10AB32T.

Langley Technical Monitor: Paul S. Miner

12. DISTRIBUTION/AVAILABILITY STATEMENT

Unclassified - Unlimited

Subject Category 62

Availability: NASA CASI (443) 757-5802

19a. NAME OF RESPONSIBLE PERSON

STI Help Desk (email: help@sti.nasa.gov)

14. ABSTRACT

This report documents the capabilities of the EDICT tools for error modeling and error propagation analysis when operating 

with models defined in the Architecture Analysis & Design Language (AADL). We discuss our experience using the EDICT 

error analysis capabilities on a model of the Scalable Processor-Independent Design for Enhanced Reliability (SPIDER) 

architecture that uses the Reliable Optical Bus (ROBUS). Based on these experiences we draw some initial conclusions about 

model based design techniques for error modeling and analysis of highly reliable computing architectures. 

15. SUBJECT TERMS

AADL, Error Modeling, Error Propagation Analysis, Model-Based Design, SPIDER

18. NUMBER

 OF 

 PAGES

35

19b. TELEPHONE NUMBER (Include area code)

(443) 757-5802

a. REPORT

U

c. THIS PAGE

U

b. ABSTRACT

U

17. LIMITATION OF 

 ABSTRACT

UU

Prescribed by ANSI Std. Z39.18

Standard Form 298 (Rev. 8-98)

3. DATES COVERED (From - To)

5b. GRANT NUMBER

5c. PROGRAM ELEMENT NUMBER

5d. PROJECT NUMBER

5e. TASK NUMBER

5f. WORK UNIT NUMBER

534723.02.02.07.30

11. SPONSOR/MONITOR'S REPORT

 NUMBER(S)

NASA/CR-2011-217149

16. SECURITY CLASSIFICATION OF:

The public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources, 

gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this 

collection of information, including suggestions for reducing this burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and 

Reports (0704-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person 

shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

PLEASE DO NOT RETURN YOUR FORM TO THE ABOVE ADDRESS.

1. REPORT DATE (DD-MM-YYYY)

01- 05 - 2011