The Armageddon Device Part II (2006)

&lt;div class="htmlview paragraph"&gt;Applying good engineering practices to software-intense automotive systems can save automakers millions of dollars in warrantee costs, lost customer loyalty and lawsuits. Carefully crafted development testing could expose non-robust software that fails intermittently when the customer activates the function.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;The chances are very good the service technician will replace the ECU when the customer brings the vehicle in for repair of the intermittent behavior. These electronic parts are sent to the supplier for analysis. Upwards of 60% of all ECUs analyzed are TNI (Trouble Not Identified) related.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;This paper elaborates on a method of developmental testing that provides these cost savings. This paper continues to build on concepts discussed in the SAE paper, “&lt;i&gt;The Bus Crusher and The Armageddon Device Part I&lt;/i&gt;”. [&lt;span class="xref"&gt;1&lt;/span&gt;] The experiment of subjecting an ECU to several electrical disturbances is explained in detail.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;The objective of an embedded system is to have a predictable output for any combination of input sequences. If the operation of the embedded system is viewed as a big state diagram, testing verifies that the embedded system operates in acceptable states and that transitions between states are all known and predictable. The stress-testing concept described in this paper generates sequences of stimuli that can’t normally be planned for (the number of combinations is massive). The embedded system must always remain in a known acceptable state, regardless of the stimulus. The testing techniques described allows for the creation of a stimulus to verify the robustness of the embedded system.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;Experiments were conducted on electrical breadboards, which were subjected to RF (Radio Frequency) noise, periodic network initialization, communication bus failures, intermittent ground open, and repeated cycling of the locking function. The hypothesis of the experiment was to stress the ECU’s operating environment by causing events that seldom occur, and make them happen with high regularity.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;The electrical noise level is below the ECU design limit, e.g., the task monitoring the ECU voltage range will ignore voltage drops of less than 15 msec (milliseconds). Subjecting the ground circuit to an interruption of less than 15 msec should result in no humanly perceivable behavior change.&lt;/div&gt; &lt;div class="htmlview paragraph"&gt;Methods to stress the software are the focus of this document. Described are:&lt;/div&gt; &lt;div class="htmlview paragraph"&gt; &lt;ol class="list nostyle"&gt; &lt;li class="list-item"&gt; &lt;span class="li-label"&gt;1.&lt;/span&gt; &lt;div class="htmlview paragraph"&gt;Building the RF Blaster&lt;/div&gt;&lt;/li&gt; &lt;li class="list-item"&gt; &lt;span class="li-label"&gt;2.&lt;/span&gt; &lt;div class="htmlview paragraph"&gt;Building the Armageddon Breakout box&lt;/div&gt;&lt;/li&gt; &lt;li class="list-item"&gt; &lt;span class="li-label"&gt;3.&lt;/span&gt; &lt;div class="htmlview paragraph"&gt;Introducing new noise factors; ground lift and periodic network initialization&lt;/div&gt;&lt;/li&gt; &lt;li class="list-item"&gt; &lt;span class="li-label"&gt;4.&lt;/span&gt; &lt;div class="htmlview paragraph"&gt;Lock-Unlock Cycle test&lt;/div&gt;&lt;/li&gt; &lt;li class="list-item"&gt; &lt;span class="li-label"&gt;5.&lt;/span&gt; &lt;div class="htmlview paragraph"&gt;Results of the tests&lt;/div&gt;&lt;/li&gt;&lt;/ol&gt;&lt;/div&gt;