Generating System Models for a Highly Configurable Train Control System Using a Domain-Specific Language: A Case Study

In this work, we present a results from case study ontesting a highly con¿gurable, safety-critical system from therailway domain using model-based risk-oriented testing. Inthe construction of the system and test models, we face thefollowing problems: (i) A domain expert will usually not beknowledgeable in the construction of system models, but hasvery detailed knowledge which con¿gurations of the systemwill be especially critical (e.g., prone to head-on collisions).Thus, a method for the construction of system and testmodels from domain-speci¿c descriptions is necessary. (ii)The system model shall be validatable against the system’srequirements. (iii) The veri¿cation of the system modelagainst safety requirements should be possible. We willdemonstrate an approach based on DSLs, compositionalconstruction of Mealy machines and a proof technique asa solution to these three problems.