This paper presents an approach to systematically build Promela models with the aim of generating test cases within the sys- tem level testing process of railway control systems. The paper focuses on the encoding of the system model, of the aspects related to the repre- sentation of possible execution environments and their interaction with the system. The input for building a Promela model of the system under test is a state machine based specification. Indeed, state machines are one of the most common notations used in industrial settings to model critical systems and allow for easily obtaining the Promela model of the system by applying a well structured transformational approach; further- more, state-based formalism are also highly recommended by CENELEC norms to model railway control systems. In our approach Dynamic State Machines (DSTMs) are used, a newly developed extension of hierarchical state machines which allow for mod- eling dynamic instantiation of processes. The approach is applied to a functionality of the Radio Block Centre, the vital core of the ERTM- S/ETCS Control System, in order to show the feasibility and effective- ness of the generation of the Promela model on a real system.
['Roberto Nardone', 'Ugo Gentile', 'Massimo Benerecetti', 'Adriano Peron', 'Valeria Vittorini', 'Stefano Marrone', 'Nicola Mazzocca']
Modeling Railway Control Systems in Promela