Changing Ways to Deliver Safety and Security

by William Wong
Dec 01, 2016

IIoT

The rise of the Internet of Things (IoT) and Industrial IoT (IIoT) is not the only reason for increased demand for safety- and security-related solutions. Many existing standards—such as DO-254 and DO-178 for avionics and Automotive Safety Integrity Levels (ASIL) risk classifications, defined by the ISO 26262—are just some of the more demanding domain-specific specifications. There are also standards for railway (CENELEC 50126/128/129) and general applications (IEC-61508).

Each standard has its own range of safety specifications, like Design Assurance Level (DAL) DO-254 and DO-178. DAL A is designed to prevent catastrophic failures, while at the other end DAL E indicates that a failure will have no significant effect on the system. ASIL-A is comparable to DAL D; ASIL-D is comparable to DAL A or DAL B.

Most high-reliability RTOS vendors provide certification, such as Green Hills Software's INTEGRITY-178 tuMP Multicore RTOS that meets DO-178B Level A certification requirements. Lynx Software provides certification artifacts for its LynxSecure separation kernel hypervisor.

Tools can also be certified. For instance, Cadence's latest toolset is available with Tool Confidence Level 1 (TCL1) documentation. This addresses more than 30 tools that are ISO 26262-compliant. Adacore’s QGen is a certified code generator that turns Simulink models into qualifiable Ada or MISRA C code. Normally generated code would have to be qualified, whereas the original model would be qualified.

Even chip-level designs need to be addressed. ARM has delivered safety documentation for automotive ADAS applications for Cortex platforms.

Further up the food chain are certified COTS boards, such as Curtiss-Wright's boards that are certified to DAL C or DAL A for avionics applications. Generating certification artifacts is costly in time and effort, so not all boards in their repertoire are designed to meet the strictest specification.

All of these can save significant time and effort in certifying hardware and software for safety- and security-critical applications. Devices without proper certification will not be usable in many automotive, avionics, medical, and transportation applications.

Discuss this Blog Entry 3

on Dec 2, 2016

All these safety measures can save time and efforts hardware and software application.

on Dec 5, 2016

DO-178 DAL F doesn't exist. DAL E is the lowest. Also, its not AdaCore QNAP, but QGen.

on Dec 5, 2016

Yup. Adjusted article accordingly.

Please log in or register to post comments.