Esterel Technologies>Products>SCADE Suite>Model Verification & Validation>SCADE Suite Model Test Coverage™ (MTC)

SCADE Suite Model Test Coverage™ (MTC)

MTC is qualified as a DO-178B verification tool

Model Test Coverage assesses how thoroughly a SCADE model has been exercised.

The SCADE Model Test Coverage module measures the coverage of the design reached by a high-level requirements-based test suite. MTC thus verifies if every element of the SCADE model (i.e., every software design feature) has been dynamically activated, and makes it possible to detect unintended functions.

Position of SCADE Model Test Coverage

The Coverage Criterion is based on observation of operator feature activation.

• A SCADE model is a network of operators.
• Each operator has a set of characteristic ‘features’, typically one feature per qualitatively different behavior

Coverage Analysis is performed at the level of each instance of an operator.

SCADE Suite MTC is Ready for DO-178C

SCADE Suite MTC provides coverage analysis at model-level, and it implements coverage criteria, such as Masking MC/DC and DC, that may be tailored to the required design assurance level of an aeronautics application. By doing so, it fully implements the criteria established within the Model-Based Development and Verification Supplement of the future DO-178C standard. When used with the qualified SCADE Suite KCG code generator, SCADE Suite MTC efficiently achieves all DO-178C objectives regarding structural coverage.

Model Coverage versus Code Coverage

Structural Code Coverage Analysis

• targets design/coding/compiling errors (unintended functions in the code)
• is not intended to detect SW Requirements errors
• is relevant for manual or non-qualified coding
• is really eliminated by qualification of the Code Generator

Model Coverage Analysis

• targets software requirements errors (unintended functions in the Low Level Requirements)
• is a real plus, not a compensation for code structure coverage