ricis 87symposium - nasa
TRANSCRIPT
Research Institute for
Computing and Information
Systems
Executive Summary of Symposium '87
A.G. Houston
editor
RESEARCH INSTITUTE FOR
COMPUTING AND INFORMATION
SYSTEMS
Executive Summary of Symposium '87
Houston, Texas
October 14-15, 1987
edited by
A. Glen Houston
Director, RICIS
University of Houston-Clear Lake
PREFACE
This document summarizes the proceedings of RICIS Symposium '87, which was held at the
University of Houston - Clear Lake on October 14-15, 1987.
This symposium was sponsored by the Research Institute for Computing and Information
Systems of the University of Houston - Clear Lake. RICIS was founded in 1986 to encourage the
NASA Johnson Space Center and local industry to actively support research in the computing and
information sciences. In May, 1986, UH - Clear Lake and JSC entered into a three-year cooperative
agreement to jointly plan and execute such research through R/aS.
This symposium was held to present the first year's research activities conducted through
RICIS as well as to introduce the JSCAJH -Clear Lake cooperative research program. The program
consisted of one and a half-days of sessions. Wednesday afternoon was devoted to presenting the
RICIS concept and an overview of the research being conducted. On Thursday, there were five
technical sessions featuring researchers presenting their research results and near-term plans. The
five technical areas addressed were Education and Training, Computer Systems and Software Engi-
neering, Information Management, Mathematical and Statistical Analysis and Artificial Intelligence
and Expert Systems.
It was decided to publish an executive summary of this symposium, rather than the papers
presented, since in most cases the researchers were not at a point in their research to publish results.
It is noted that f'mal reports of the research will be published and may be obtained from the RICIS
Project Office as they become available.
A large number of people helped make RICIS Symposium '87 a big success. The organizing
committee included Peter C. Bishop, Sam J. Bruno, Terry Feagin, Glenn B. Freedman, Cecil R.
Hallum, Robert F. Hodgin and Charles W. McKay. A special thanks is extended to Sam J. Bruno for
tending the many details required to make such an event a success.
The RICIS Project Office staff, particularly Kerry Ellison, Vickie Gilliland and Bassanio
Wong, aided by other UH - Clear Lake staff, notably, Jean Hart, Mary Jo Westover, Olga Gonzales
and Melinda Goyne, oversaw the correspondence and bookkeeping, maintained a participant data-
base, assembled registration packets, and manned the registration booths. E.T. Dickerson, Dean of
the School of Natural and Applied Sciences, UH - Clear Lake and R.B. MacDonald, Assistant to the
Director for Technology Utilization Mission Support, Directorate, NASA Johnson Space Center,
were very supportive and provided welcome guidance for conducting this symposium. Thanks ate
also extended to Amy Kennedy, Employee Development, NASA/JSC, and Connye McLendon,
Administrative Office, Mission Suplx_ Directorate, NASAJJSC for working the registration and
transportation issues, respectively, for JSC employees to attend this symposium.
Financial support for the Symposium came from NASA Johnson Space Center through
Cooperative Agreement NCC 9-16.
A. Glen Houston
Director, RICIS
Contents
Welcome and Opening
JSC/UH - Clear Lake Cooperative Research Program
The RICIS Concept
RICIS Research
Invited Talk
Keynote Address
RICIS Research Areas
WELCOME AND OPENING
Thomas M. Stauffer, President, UH-Clear Lake
Paul J. Weitz, Deputy Director, NASA Johnson Space Center
The RICIS Symposium '87 opened with remarks by Dr. Thomas Stauffer, president of the
University of Houston-Clear Lake, and by Paul J. Weitz, Deputy Director of NASA Johnson Space
Center. Dr. Stauffer drew an analogy between software engineering research and the emerging
superconductor technology. He indicated that while cooperation between academia and industry is
sometimes difficult, joint research, like that which is being conducted through RICIS, is of
significance to Houston, to Texas and to the entire nation.Mr. Weitz discussed the importance of software systems to the space program. He said that
without the appropriate major software systems, spacecraft design, flight simulator, mission control
and the Space Shuttle are not possible.
JSC/UH-CLEAR LAKE
COOPERATIVE RESEARCH PROGRAM
Joseph P. Loftus, Jr., Assistant Director for Plans, NASA Johnson Space Center
Charles S. Hardwick, Senior Vice President and ProvostUH-Clear Lake
Joseph P. Loftus, Assistant Director of Plans for JSC, and Dr. Charles Hardwick, Senior
Vice President and Provost of UH-Clear Lake, offered comments about the cooperative nature of
the JSC/UH-Clear Lake research program. Mr. Loftus discussed the space business as being
extremely information-intensive. He pointed out that, aside from the returning Space Shuttle, an
information su'eam is currently the only product we obtain from space. Hence, solutions are to be
found in software.
Dr. Hardwick discussed the need for a "major revolution" in the methods by which manag-
ers and engineers are educated. Educational systems and curricula need to be developed to allow
them to better cope with the complexity of software and to ensure the success of the space program.
THE RICIS CONCEPT
E.T. Dickerson, Dean, School of Naturaland AppliedSciences,UH-Clear Lake
Robert B. MacDonald, AssistanttotheDirectorforTechnology Utilization,
Mission Support Directorate,NASA Johnson Space Center
A. Glen Houston, Director,RICIS, UH-Clear Lake
The RICIS Concept
Dr. E.T. Dickerson, Dean of the School of Natural and Applied Sciences, UH-Clear Lake,
Mr. Robert B. MacDonald, Assistant to the Director for Technology Utilization, Mission Support,
Directorate, JSC and Dr. A. Glen Houston, Director of RICIS, UH-Clear Lake discussed the history
and objectives of R.IOS.
RICIS SYMPOSIUM '8'7PROGRAM
WEDNESDAY, oCrOBER 14BAYOU BUILDING
12'.30-5.'00 REGISTRATION ATRIUM 1
1:30-1:45 WELCOME AND OPENING AUDITORIUM
Thomas M. Stauffer, President, UH-Clear Lake
Paul J. Weitz, Deputy Director, NASA Johnson Space Center
1:45-2.-05 JSC/Utt-CLEAR LAKE COOPERATIVE RESEARCH PROGRAM AUDITORIUM
Joseph P. Loftus, Jr., Assistant Director for Plans,NASA Johnson Space Center
Charles S. Hardwick, Senior Vice President and ProvostUH-Clear Lake
2.@5-2:50 THE RICIS CONCEPT
E. T. Dickerson, Dean, School of Natural and AppliedSciences, UH-Clear Lake
Robert B. MacDonald, Assistant to the Director for
Technology Utilization, Mission Support Directorate,NASA Johnson Space Center
A. Glen Houston, Director, RICIS, UH-Clear Lake
AUDITORIUM
2:50-3.'05 REFRESHMENT BREAK AUDITORIUM FOYER
3.@5-4:45 RIClS RESEARCH
Com0eterSystem ud SoawareCharles W. Mc,Kay, Diteaor, High Technologies
Laboratory and So/lware Engineefi_,Research Center,UH-Clear Lake
_e_e _a _ SystemsTe,rry Feagia, UH-C_u"
Peter C. Bishop, UH-C_r
Mathematicalml Sta_ _y_R. I-I_um, UH-CI_r Lake
Eduoltion and TrainingGlenn B. Fn_m, Dir_r, Center for Cognitionand _oo, UIt-O_r Lake
AUDITORIUM
4:45-5.'00 REFRESHMENT BREAK AUDITORIUM FOYER
5.'00-5:30 _TALK
Lee B. Holmmb, Dimcg_, Human Sciences
and Human Facto_ OAST, NASA Headquarters
CLOSING REMARKS
Robert F. Hodsin, UH-Clear Lake
AUDITORIUM
6:30-7:30 RECEPTION - CASH BAR OK.RUTH CENTERSecond Floor
7:30-8:30 DINNER GILRUTH CENTER
8:30-9.'00 KEYNOTE ADDRESS
The Real Technologies in Space ,._rion laformation Systems
John R. Garman, Director of Information Systems Services
Space Station Program Office, NASA Headquarters
GILRUTH CENTER
THURSDAY OCTOBER 15
8.'00-8".30 REGISTRATION/CONTINEWrAL BREAKFAST ATRIUM I
8:30-8".35
8:35-9:45
RICIS RESEARCH AREAS
Robert F. Hodgin, UH-Oear Lake
EDUCATION AND TRAINING
Conveners: Glenn B. Freedman, UH-Oelu" Lake
Amy B. Kennedy, Em#oyee Developmeat, NASA/JSC
Review ofthe_n and _ Actit,iti_Glean B. F_an, UH-Cktr Lake
Softmre_ anddse_ toAdzJohn Mcertde,sofrecb, tw.
ComputerBasedAda Tmin_ Uan$H.vpen_S.v_msJack_ andRobertWallace,Sdr_a,
ROOM 2-532
ROOM 2-532
9:.45-10:00 REFRF_IIM BREAK ROOM 1-532 FOYER
10:00-12:00 COMPUTER SYSTEMS AND SOFTWARE ENGINEERING
Conveners:. Charles W. McKay, UH-Clear Lake
ROOM 2-532
Stephen A. Gorman, Head, Application Systems,
Spacecraft Software Division, NASA/JSC
Fault Tolerant Ada Software
Pat Rogers, UH-Ciear Lake
A Study of Converting PCTE System Specifications to Ada
Kathy Rogers, Rockwell International
Proof-of-Concept Prototype of the Clear Lake Model for Ada Run Time Support Environment
Charles Randall, GHG Corporation
Testing And Verification of Ada Flight Software for Embedded Computers
David Auty, SofTech, Inc.
Ada Programming Support Environment Data Base
Anthony Lekkos, UH-Clear Lake
12:00-1:00 BUFFET LUNCHEON FOREST ROOM
1:00-2:30 INFORMATION MANAGEMENT
Conveners: Peter C. Bishop, UH-Clear Lake
William J. Huffstetler, Assistant to the Director, Engineering, NASA/JSC
The Need for Strategic Information at JSC
William J. Huffstetler, NASA/JSC
Research Projects in Information Management
Peter C. Bishop, UH-Clear Lake
T'tmothy N. Tulk_:h, Vice President, TNT Consulting
Space Station
Docwnentation Technololff and Strategies
Christopher Dede, Professor of Education, UH-Clear Lake
Future Research Opponlmities
Lloyd R. Erick._n, Electronics Engineer, NASA/JSC
2"30-2:45 REFRF_HMENT BREAK ROOM 2-532 FOYER
"2:45-3-.30 MATH]F.,MATECAL AND STATISTI_LL ANALYSIS
R. HaUum, UI-I-Oear Lake
Da_ Z. C,e_, l_.um e_maiaSmSAnalysisDivis/ee,NASA/JSC
Space StationMomentwn Management and AttitudeControl
BorisWie, UniversityofTexas atAustin
Qmmah,/ng ,.r,o_ Re//ab_ (Invited Prmentuion)Patrick L. OdeU, University of Texas at Dallas
3".30-5:40 ARTIFICIAL INTELLIGENCE AND EXPERT SYSTEMS
Conveners: Terry Feagin, UI-I-Clear Lake
Timothy F. Oeghom, Mission Planning
Analysis Division, NASA/JSC
Introduction and Overview
Timothy F. Clcghom
C.ommanicafionand TrackingExpertSystemsfortheNASA Space SaaOon
T.F.Le£e_r/ed,Utl-ClearLake
$_nulat_n of P.obo_ Space $.nums
Yashvant JJu3_ l.,htCom _n
Roba_ Path Harming and _ft_m,e T_ Arc_x-we
Ridmrd D. Vol_ Univel_tyofI_
Fuzz), Sa and Re/raM T/twtyfo, Fa//are _ and _/n Space Symems
Thomas B. Sheridm_ Massachusetts Imtitute of Technology
A _ cra_ r_ _ and T_ vz_bn_/er S_ _mab_Johne. _ Jr_ nke Umvem_
z_emm_m ofa_o V_ona_ for Spacea_RuiJ_. de.F'_do, RiceUnivm_
CLOSING REMARKS
A. Glen Homum. UH-Cimr Lake
The RICIS Concept
Robert B. MacDonald
N91-18617
In May 1986, JSC initiated a cooperative program with the University of Houston - Clear
Lake to support research in computing and information systems. The objective of this program was
and is to provide continuing long-term research in support of the numerous mission and mission-
related endeavors of NASA/JSC. JSC defined a "cooperative agreement" as the appropriate
contractual vehicle to facilitate both joint participation of researchers from NASA, industry and the
university community, and sharing of supporting research facilities among the participants. Facilities
are shared by networking among UH-CL's research and data computing resources and JSC's
computing system.
A significant part of the cooperative program is its "gateway role." UH-CL is chartered to
involve researchers from outside organizations throughout the US and the world in projects defined
by professionals at NASA and UH-CL.
A particularly important set of activities being carried out under the cooperative program is
in the area of "computer software development." Because it recognized these activities as a critical
element of the cooperative program, the Office Aeronautics and Space Technology at NASA
Headquarters supported the initiation of the Software Engineering Research Center (SERC).
In order to meet research and education needs associated with the engineering of large, real-
time software systems for NASA's future numerous researchers at SERC are investigating:
.
,
.
.
engineering research issues central to large distributed systems for real-time and
distributed systems with active embedded elements (such as for thespace station)
concepts, principles and methodologies for the engineering of such large
software systems
"computer aided software engineering environments" to advance the state of
thepractice to achieve improvements in the quality productivity crucial to
the application of engineering methodologies to software lifecycle phases
the establishment and incorporation into of future systems of appropriate standards.
With the growth of software development activities, comes the increase need for education.
Currently most managers and professionals continue to emphasize the implementation and test
phases of the "software lifecyele." More disciplined engineering approaches require that this
managerial and professional workforce be educated in approaches to software development which
emphasize requirement and design phases and designing for change.
The evolution of engineering mefl_dologies and tools such as C._SE and languages like
AI_)A over the last ten years has created a severe shortage of individuals who Ire teclufically andemotionally p_)an_ to exploit fl_ese advances. In response, the School of Education and the
School of Natural and Applied Sciences at UH-C'lear Lake have emblJshed the Software
Engineering Professional Education Center (SEPEC). The objective of this new center is to
interact with SERC and other organizations throughout the US, such as the $EI at Carnegie MelLonUniversity, to develop and bring about suitable education and training at both professional andacademic levels.
In short, the central goal of the SERC and SEPEC is to develop and make available the
Engineering Knowhow, the qualified human resources and supporting to tools and rules to better"engineer large, d/stributed, real-time software systems of the future."
m
m
¢.)
ILlC/)
0m
0"-C/)
0
X0E
WWlU
E0ILW
0LL,
C_WQ
0 wI
0 I-.._ _ 00 a _.
E q
C.) a E ccw 0 0 u.
I- _ u. u.U"0U) W W-- r_
W U. U., U.
u. 0 0 0 wZ
° o o o _
C5 Z u._. ILL
z c_ w,,.I _) W E I-
w _ 0 c__ w 0 0_ _uu
(nLUI--Q.LIJ0Z00
U)
m
n,,
I
¢/)(nI
.,.J02:
!
(n
z
,q.coo)
ILl
Z
Q.=,<ILlU.IQ.0
(nI..-Q.iJ.ioz00
(n
m
Q=
U
GOO)
0LU
;[mmm)
0Q.(1.,<
0LU
Immm
g
(DO0O)
;[<C
IJ.I-r(nm
.-I
U)U.IILl
=JZ0
Z
14,1
if)
Z
ZR
0
0O,,0
(D
O)
if)
Z
I,U
I
if)
0Q.0
m
m
__1
0
Z
R
LU
mm
I-(/)Zm
(Ja:<IJJU)UJ
0m
0LI.U)
mira
,- IJJO'O I-'*" U)
m>.(.9¢nm
00
I-0
Q
00
(J
<
C_
r_
I-<I
aE00
W
<ZI
ZI£1Wc_
Q
LUWI..-I..-m
0
ZI
ILlU.II--
I
m
I-m
m
mm
U)
0G.C_U.I
Z0m
I--
U.IC=_m
0-IW
i£1..I
I
..I0n_ZCOI
..Im
0m EW n_
m
C=02:I--=<I--ZI£IZW0 z< m Z
<_-_Z n_--, < ___J
E I,-W_ m ,C
-- E0 u_ I--W W COQ w I.-•- m (.1
E ww _
0 a
Zm
I,-
lj0
u_
0I-,<
l-mw
z
_d
I
_Ja.z__C_
i...w_mwl-,ww:EW
0I-
ILl
m
m
I-
3m
W
0a.c_
WW
_k
SZ00C_ZI
ElU
WI-E0Ck_k:)W
C_
I-i
Zm
ZZ<
.,I
I-0
I
a
ooo
WW
I
_E_E00
0
WuJ
0I,-,I-E0a_Q.
L14.
wwa
0
a
0W
0
n_
X0
<Wc_W
O
I
C_I
M
W
ZIiI
WI
WW<
I,-0W
0
n_
0
<WWI£1
0C_
WC_Cg0
Ck
0I-I
Z0
W0
0WI-DI-
ZI
W
<Z<
LULLII-I-/
0
C_LUC_
C_
/
I-m
m
mm
C_
0LC_
Z0R
I-
W
m
r_-I
r_U
C_
I-ILla
0L
C_
0
C_
C_m
-Im
C_
m
I-m
I-c_
0
WWW
I-0X0L
C_
a.m
ZR
C_
C_Z0R
I.-
N
Z
0Z:
e_
wt_we_
it
I-.Zlua
i-e,.0Wn-
r_z
C_.I
C_0
0
C_
WC_W
WI-
I-
C_LU
m
i-rai-I
ZQ
WC_
W
W
0
W
RESEARCH ACTIVITY METHODOLOGY
• RESEARCH ACTIVITY MAY BE INITIATED BY RESEARCHER
OR JSC SPONSOR
• RESEARCH ACTIVITY DESCRIPTION CRAD) INCLUDES:
- RESEARCH OBJECTIVE
- BACKGROUND
- APPROACH
- SCHEDULE
- DELIVERABLES
- BUDGET
• RAD REQUIRES TECHNICAL APPROVAL (JSC AND UHCL)
• GATEWAY RESEARCH REQUIRES PROPOSAL (RAD) FROM
RESEARCH ORGANIZATION
RESEARCH ACTIVITY METHODOLOGY
• EACH RESEARCH ACTIVITY IS INITIATED (OR LATER
MODIFIED) VIA A PROGRAM CHANGE REQUEST (PCR)
• PCR REQUIRES ADMINISTRATIVE APPROVAL
(JSC & UH-CLEAR LAKE)
TabLe 1. Approved Rn4mrc_ Actlvltlee u of September 30, 1M7
RESEARCNIMSTITUTE FOR ccIqPUTING & INFQIUqAT|ON SYSTEMSCOOPERATIVE AQREIUqENT_ 9 - 16
PROJECT IMPLEMENT|NG JSC TECHliiCAL NQIiITOItRES_UICN ACTIVITY D]RECTOR ORGANIZATION IMiq_ CEQ.
= -- I_S Inlg Ill8 mBnll t Im Illi_STIm 8m .llBsmgs_ I_l.
AI.I CCI_I.qiCAT|OII & TLACI(INGEXPERT SYSTEMS STUDY
BE7LEIIIFRIED UH-CLEAB LAICE SCIBIIDT
Ai .2 CCIqPUTERGRAPHICS TESTSED TO FEAGIN & RICE UNIVERSITY ¢LEQlioRII Iqq7SIMULATE & TEST VISION EYS- CNEATNNqTENS FOIl SPACE APIWLICAT[ORS
ROBOTIC PATN PLAMNItG & SOFT- FEAGIN &WARE TEST-lIED ARCHITECTURE VOLZ
A! .3
AI.4 APPLICATION OF FUZZY SET A/dO FEA_IkM&RELATED THEORYTO FAXLUREOE- SNER|DANTECTION AND CONTROL IN SPACESYSTEMS
A! .5 OENONSTRATIONOF A 30 VISION FEAGIN &ALGORITHM FOR SPACE APPLICA- cleFIUIREDOTIONS
AI.6 SIMULATION OF ROOOTIC SPACEOPERATIONS
A[ .7 T IN THE CILAYX/MP
AI .8
AI .9
ET .3
ET ._
RiD FOR ORBOARDNAVIGATION (ONAV)GROUNDSASED EXlq[RT/TIUtINER SYSTEM
OeJECT ORIENTED P_dU_IqING &FRAME REPRESENTATION USING ADA
SOFTWAREENG. & ADA TNG
SOFTUAREENGINEERXNG WITN ADA:A LIFE-CYCLE CURRICULUIq
COMPUTERBASED ADA TILAININGSYSTEMS (CSATS)
SOFT_ ENGINEERING AND ADATRANSITION COURSEDEVI[LOPNENT
SPACE _UtlCET MODEL
CLEAR LAICEAREA CCIqlIUTERCAPABILITY UVIEY
%M.3 SPACE SHUTTLE PAYLQADINFORMATION SYSTIgq
XM.6
]N.5
IX.6
IN.7
IM.8
ELECTRCMI¢ DOCUNENTATIOR
LONG-RANGEPLAN FOR THECX]qMERCIALDEVEI_MT OFTNE SPAC_ STATIOR
NETHOOCX.OGIESFOR INTEGRATEDINFONIMTION NANAGB_NT SYSTEMS
DEVELCPlNG INTEGRATED PARNgTRICPLANMING MODELS FOR BUDGETINGAND MMAGING O01gq.iXDLrV. IqtOJ.
CLEAR UU_ AREA coIqJTEICAPABILITY CENSUS
MANAGEMEMTINFORMATION ANDOECISIOR _PlP_tT [RVIRQNN[NT
OIARRATANO& dANI
FEAGIM &HUDAK
FEAGIM &4Nql
FEAG!N, AUTY& CMARIIIA]C
FREEDMAN
FREEDMAM
FREEDMAN
FREEDMAN&MclSIOI[
IISNQP
I_OGIN
ltll_
IISIIOP &EVAN
BISIIOP &IMY[R
ETMYRE &BLA¢IC
mlM
111131I
UNIV. OF CLEGIN3RM FM7MICNIGMI
M.I.T. CLEGHORN fM7
RICE UNIVERSITY CLEGH(_N FN7
LINCCM CLEGH_tN FM7
YALE UNIVERSITY SAVELY FIq72
LINCCI4 CORP. SAVELY F1qT_
SOFTECN& SNULER FR&IIItO_UlllV.
UN-CLEAR LJU_ GOmqAN FR63
UN-CLEAR LAJ_ GCtNAN FR63
UH-CLEAR _ _ FR43
UN-CLEAR _ I_NNEOY JW311& SOFTECN
UN-CLF.AJI LA_ DE]_L ICE
UH-CL _ OF Ne¢OONAL9 FAU. REliSH
UN-CLEAR LAJ_ OENING EX2
UN-CLEAR LJUCE GORICAJI FR43
CTR FOR SPACE SVEGLIATO ICZAND ADV. TECH. HENDERSON F.X6
TEXAS A/dq SAVELY FN?2
UH- CLEAR LAKE MMl TTINGTON 10(2
UN- CLEJUI LA[E _ FA
UN-CLEA8 CLENt ERICI_DII FN26IM.9
Currlnt Date: 11-0¢t-87
PERIOD
II i w .
6/1/117 12/3t,+_"
6/1187 1011518?
6/1/87 12/31/87
6/1/87 12/31/87
611187 9130/87
611187 9115187
611/87 5/31/M
10/1187 5/31/88
1011/87 5/31/88
1116187 5131187
611187 12131187
611187 12/15/87
711187 _.115/_
6/1186 5/31/88
?.11187 6/30/87
111187 12131/87
611/87 5/31/88
611/87 9/31/8_
6/1/87 12/31/87
7/1187 1/15/lm
8/1187 311188
811187 5131188
ORIGINAL PAGE IS
OF POOR QUALITY
TabLe 1. ACq_roved Research Act|v|ties as of September 30, 1987
RESEARCH INSTITUTE FOR C_TIWG & INFORMATIOR SYSTEMS
COQPERATIVE AGREEMENT NCC 9 • 16 Current Date: 11-0ct-87
PROJECT II_LERENTING JSC TECHNICAL MONITOR PERICX)RESEARCH ACTIVITY DIRECTOR ORGANIZATION NAME ORG. FRCi4 TO
========ssmsusslmss_mRms_mmiSmaas=zi_mliw8imBsuu_ml_s_mmmism_lmBm_mms8m_mi_n_u_mm8_I_mxm_m_zz_l_-__-_-_-_
IN.tO RESEARCH IN IMAGE MANAGEMENT BISHOP & UNIV. OF TEXAS PEWR¢ID _ I_#'%/_" _,:}_."9_
AND ACCESS RORVIG
MS.1 SPACE STATION H(]4ENTUM MANAGE- FEAGIN & UNIV. OF TEXAS BORDAJK) _ 611/87 1/3_/8_MENT ANO ATTITUOE CONTROL HIE
PO.1 RICIS PROJECT OFFICE HOUSTON UH'CLEAR LAKE MacDONALD FA 611186 5/31/_,B
SE.1 ADA PROGRAMMING SUPPORT LEKKOS & UN-CLEAR LAKE LOVEALL FR121 611186 1/_5/8/B
ENVIRONMENT OATA BASE LIAW
SE.2 OMS TEST BED USER'S MCKAY & _FTECH, INC. RAINES EH421 611186 10/_1/_MANUAL DEVELOPMENT AUTY
SE.3 k,DA-BASED S-O-A EXPERT MCIOkY & INFERENCE, INC. SAVELY FMT2 9/_/86 6130/87
SYSTEM BUILDER WILLIAMS
SE.4 APSE BETA TEST SITE NcKAY & SOFTECH, INC. C_)RMAN FR63 611/87 10130187TEAJ_ SUPPORT LEGRANO
SE.5 BENCHNARKING OF ADA ON NcKAY & SOFTECN, INC. HUMPHREY EH431 7/1/86 5/31/87
EMBEDOED COI_PUTER SYS. AUTY
SE.6 DEVELOPMENT OF A PROOF- McKAY & UN CLEAR LAKE GORNAN FR6] 611186 12/31187
OF-CONCEPT PROTOTYPE RANDALL & GNG INC.
SE.7 JOINT NASA/JSC UN-CL MClCAY UH-CLEAJI LAKE GORM_ FR&_ 611186 9130187
SERC
SE.8 WORK STATION EVALUATION PERKINS & UN-CLF.AR _ SCHIdANTZ EA121 6/1/86 10/31/87
¢_IAVES i 141RIOS
SE.9 TESTING AND VERIFICATION OF NcKAY & SOFTECN, INC. HUMPHREY EN431 6/1/87 1/3_/_8
ADA FLIGHT SOFTblARE FOR EM- AUTY
BEDDED COMPUTERS
SE.10
SE.11
ATOP : SERC - A STUDY OF
CONVERTING PCTE SYSTEM
SPECIFICATION TO _A
SYMBOLIC INFORMATION IN ADA
TESTING ANO INTEGRATION
SE.12 ATOP : SERC-SECURITY FOR SPACE
SYSTEMS
SE.1] ATOP : AUTCI4ATIC SOFTWARE
VERIFICATION TOOLS
SE.16
SE.15
IRDS PROTOTYPING U/ APPLICAT'N
TO REPttES_NTATION OF EA/RA
NOOELS
FAULT TOLERANT ADA SOFTM/UtE
SE.16 IMPLEMENT THE DISTRIBUTEDADA I_EL
SE.17
SE. 18
ADA ANALYSIS FOR NASA SPACE
STAT[Oil PROCdUU4 OFFICE
ESTA8LISHNENT OF ADA TECHNOLOGY
TRANSFER NETWORK: AdmNET
NcKAY, SOFTECH, INC. GORIMN FR63 6/1/87 7/]1/87AUTY & & ROCKMELL
ROGERS
McKAY & SOFTECN, IK. GORJ4AM f163 6/I/87 2/15/P._
AUTY
NCICAY & SOFTECN, INC. GOiU4AJI FR4$ 6/1/87 911/,187LeCAAND
NcKAY , SOFTECH, INC. _ FR43 611/87 1/1/88COHEN &
/dRY
LEia(O_ UH-CLEAR LAKE GQItflAN FR63 611187 8111187
DOMNlOAVARII UH-CLEAR LAKE GORIM_ FR&3 611187 12131/87
ROGERS/MCKAY
M¢XAY, iOU4RAD HONEYMELL & GOR_ FR63 6/1/87 5/]1/8,8
& RANOALL GNG CORP_I_T|OM
MCKAY & SQFTECH, INC. HALL HQTS 611187 5/31/8_
N¢ilAIDE
14OKAY, BUTCHER MountofrINEt lIVENS HQTS 10/1/87 5131/88
& OIGMAN
ORIGINAL PAGE IS
OF POOR QUALITY
UH-CLEAR LAKE / NASA-JSC
COOPERATIVE AGREEMENT NCC 9-16I II !
THREE YEAR AGREEMENT BEGINNING JUNE I, 1986
-_ EACH 12 MONTH SEGMENT FUNDED SEPARATEEY
-_ $5.1M ALLOCATED FOR FIRST TWO YEARS
m EXPENDED $1.8M IN YEAR ONE
m LEAVES $3.3M FOR RESEARCH IN YEAR TWO
RICIS JSC SPONSORSIUNB _L,1.088 - 8B]PT]DfBBR80, 5.88Y
SPACE STATION6.8%
ENGINEERING11.4Y.
DIR./PERSONNEL4.4%
NEW RES. ACT.8.4%
CENTER OPS
MISSION
67.8%SUPPORT
RICIS JSC SPONSORSII I
IfHJlOlr BUPPORTDIRl_TORI551_lolud, e8 fuade fz,om the ![817 msd tho iiz ]J'ozoo)
DATA PROCESSING21.7_
SPACECRAFT S/W47.,5%
MISSIONPLANNING31.0_;
RICIS JSC SPONSORSBIrGIN|BRING DIRB_TORITI
DIRECTOR8.6_
FLIGHT PROJECTS25.9_
CKING & COMM35.4_
AVIONICSYSTEMS30.1_
RICIS RESEARCH
AI 8( EXPERT SYS14.B_
ED & TRAINING7.0%
INFO MGMT26.5%
MATH k STAT2.3%
COMPUTER ENG.49.3_
RICIS RESEARCHERSIUNB _ :t888 - 8wp_UR 80, _L88Y
CONSULTANTS
4.0_
INDUSTRY57.7%
UH-CLEAR LAKE45.,.','3_
OTHER U NIV.13.o%
04,,_,742
RICIS RESEARCHERS0'I'111 '12]IN|]Err]lll
YALE RICE7.6% 8.8%
UT-AUSTIN21.6%
U. MICHIGAN16.5%
TEXAS A&M41.4_
RICIS RESEARCHERSIlnuj_!
MOUNTAINNET
12.5_
BARRIOS2.6_
HONEYWELL8.5%
GHG6.5_
SOFTECH40.0%
CSAT
14.o%
INFERENCE LINCOM
10.2% 5.7%
N91-18618
RICIS RESEARCH
Computer Systems and Software EngineeringCharles W. McKay, Director, High Technology Laboratory and Software Engineering
Research Center, Professor of Computer Science, UH-Clear Lake
Artificial Intelligence and Expert SystemsTerry Feagin, Professor of Computer Science, UH-Clear Lake
Int'ormation SystemsPeter C. Bishop, Director, Space Business Information Center,
Associate Professor of Human Sciences, UH-Clear Lake
Mathematical and Statistical AnalysisCecil R. Hallum, Associate Professor of Mathematics, UH-Clear Lake
Education and TrainingGlenn B. Freedman, Director, Center for Cognition and Instruction,
Associate Professor of Reading and Language Arts, UH-Clcar Lake
An Overview of the Computer Systems and Software
Engineering Component of RICIS
Charles W. McKay
The principal focus of this RICIS component is computer systems and software engineering
in-the-large of the lifecycle of large, complex, distributed systems which:
evolve incrementally over a long life,
contain non-stop components, and
must simultaneously satisfy a prioritized balance of mission and
safety critical requirements for behavior at run time
This focus is believed to be extremely important at this time because of the contribution of
the "scaling direction problem" to the current software crisis. That is, paradigms/models, tech-
niques/methodologies and tools which often worked for yesterday's comparatively smaller, simpler,
centralized systems have been shown to be an inadequate baseline to scale-up to meet the challenges
of distributed systems. By contrast, models, methodologies, tools, and environments which are
based on a sounder theoretical foundation to address these larger and more complex systems are
capable of scaling-down to meet the needs of less demanding, centralized applications.
As shown in Figure I, the Computer Systems and Software Engineering (CSSE) component
addresses the lifecycle issues of three environments-host, integration and target. Solutions are pro-
posed, specified, designed, developed, verified and sustained in the host environment. The solutions
are deployed, monitored, interactively queried and operated int he target environment. Increasingly,
components of both the host environment and the target environment are geographically as well as
locally distributed. The solutions from the host environment are moved into the target environment
under the control of the integration environment. The integration environment is responsible for
monitoring and sustaining the current baseline of software, hardware and operational components in
the target environment. The integration environment is also responsible for the test plans and for
controlling the integration and evolution of advancing the target environment to the next baseline.
Emergency interactions are also controlled through the integration environment.
As Shown in Figure 2, an integrated lifecycle support environment is becoming the common
interface to four principal engineering activities: computer systems engineering, software engineer-
ing, hardware engineering, and the management of operations and logistics.
Currently there are more than 18 funded research activities in this technical area. Addition-
ally, there is a larger number of CSSE coordinated research projects which are funded by companies
working with the university. Several of these activities are deliberately structured interfaces to the
other four components of RICIS.
The goals for CSSE research during the next three years may be summarized as:
I. To develop a position of international leadership in the engineering
of mission and safety critical components for the target and integration
environments of large, complex non-stop, distributed systems.
. To sustain a position of international leadership in the research issues
of the host environment for the above applications.
3, To augment the Computer Systems and Software Engineering research
base and provide support as needed to the other four technical areas
addressed in RICIS.
f
TWO SCENARIOS FOR
SSP EnUlRonmEnT
In;_ooo+ R.13.
X X
® x x
_1 x .. x _ o o " Ix x 0 0
HOSTEnUIROnmEnTS:
• OEUELOP
• 5USTRIn
InTEGRRTIOnEnUIROnmEnT:
• CONTROL 131=TEiT. EnUIR.
BRSELInE
• InTEC;RRTIOnU_U FOR nEXTBRSELInE RnO
TESTInTEGRRTI13n
PLRnS
TRRGETEnUIROnmEnTS:
• OEPLOV
• OPERRTE
O3
:3 CD
om
O _ C_C.3 o3
LL.I
QW
c_ k..
"C3 r"eg
c_ C_-I"-
LL.I
m
I.L,I
C_
Qm
oOm
OCO i_,
LIJ
U'J
Omm
_m
_ t--- u)Im
£3. O
N91-18619
An Overview of the Artificial Intelligence and
Expert Systems Component of RICIS
Dr. Terry Feagin
Artificial Intelligence (AI) is the study of how to simulate the intelligent behavior and prob-
lem-solving skills of humans using computational models. Expert Systems (ES) axe AI application
programs for accomplishing a task which requires expertise from within a particular domain, i.e.
deciding where is the best place to drill for oil, determining how to configure a large computer
system or finding the cause of a power outage. The areas of research in AI include knowledge repre-
sentation, search, planning, learning and knowledge acquisition, computer vision, natural language
understanding and speech, automatic inference and theorem proving, reasoning with uncertainty,
logic programming, expert system and robotics. In solving these problems, the AI research scientist
employs a number of specialized models, approaches and representations such as predicate calculus,
semantic nets, scripts and frames, augmented transition networks, heuristic search, decision theory,
constraint propagation, fuzzy logic, Bayesian inference networks, measures of belief/disbelief,
defauh reasoning and production systems with forward and/or backward chaining.
For space applications, a number of problem areas that should be able to make good use of
the above tools include resource allocation and management, control and monitoring, environmental
control and life support, power distribution, communications scheduling, orbit and attitude mainte-
nance, redundancy management, intelligent man-machine interfaces and fault detection, isolation
and recovery. Research activities in this technical are researching solutions to these problems using
the techniques of artificial intelligence and expert systems.
N91-18620
An Overview of the Information Management
Component of RICIS
Peter C. Bishop
Information management is the RICIS research area devoted to the final customer of comput-
ing and information systems--the end-user. They are the people at the end of the long chain of
infonuation systems who don't care how their information is collected, manipulated or stored as long
as the right information is in their hands at the right time.
Information productivity is the overall objective of the information management research
area. In other words, people who use information systems should realize more value by using the
system than by not using it. NASA in general and the Johnson Space Center in particular have a
tremendous need to understand what makes an information system productive and to develop pro-
ductivc systems for its employees, contractors and customers. JSC, for instance, has the responsibil-
ity to manage the U.S. space operations--a task which re,quires art incredible amount of information.
As a rcsuh, JSC should be a national leader in using information in a productive manner. The
information management section of RICIS is set up to engage in those research projects which
promote that end.
The approach of the research tasks within the information management section varies de-
pcnding on the nature of the problem. Four types of tasks were initiated during the f'trst year:
Surveys -- a description of the existing state of some area of computing
and information systems.
A° Environmental Scanning for Information Processing
(Dr. Peter Bishop, OH-Clear Lake)
A survey of existing products for IBM mainframes in
three applications areas--database management, full-text retrieval and
optical character recognition
B° Clear Lake Area Computer Capability Census
(Dr. Robert Hodgin, UH-Clear Lake)
A survey of JSC and contractor computer capability in the Clear Lake area.
Forecasts - a description of the alternative future states of some area
A. Space Station Advanced Virtual Electronic Documentation
('Dr. Chris Dede, UH-Clear Lake)
An analysis of information technology which could be available for use
in the documentation of space station software when it is developed
Plans -- an approach to accomplishing some objective in the future
A. Long-Range Plan for Commercializing Space Station
(LJ. Evans, CSAT)
An analysis of the drivers and obstacles to commercial use of the space station
along with strategies for overcoming the obstacles in order to maximize such use
B. Methodologies for Integrated Information Management Systems
(Dr. Richard Mayer, Texas A&M
A theorerlcal model for designing requirements for information systems
Demonstrations -- working prototypes and field trials to study the feasibility and
the benefits of a particular information system
A. Space Shuttle Payload Information System
(Dr. Peter Bishop, UH-Clear Lake)
A study of the information available concerning the Space Shuttle
B. Space Market Model Development Project
(Dr. Peter, Bishop, UH-Clear Lake)
A study of the information available for space commercialization in general,
including a design for providing the business community information which it
does currently posses
C. Research in Image Management and Access
(Dr. Mark Rorvig, UT-Austin)
A study to increase the searchability of the keywords associated with the
photographic and video archives at JSC
D. Management Information and Decision Support Environment
(Dr.PeterBishop, UH-Clear Lake)
The prototype design for a computer interface whereby JSC managers can getinformation from JSC databases
An Overview of the N 9 1 " 1 8 6 2 1Mathematical and Statistical Analysis
Component of RICIS
Cecil R. Hallum
An aspect of computing that especially warrants input from the mathematical and statistical
community is that which pertains to assessing the quality of a piece of software, or the trustworthi-
ness of computer hardware and computer networks. Although much of the work in this area is
probabilistic in nature, most of the work to-date has been done by engineers and published in the
cnginccring literature. Numerous problems remain, however, whereby mathematicians and statisti-
cians should get involved in order to provide supporting research, particularly in regard to design of
hardware, the configuration of networks and policies for the development of reliable software.
Due to advances in microelectronics, problems regarding reliability are gradually shifting
from hardware to software. Moreover, due to the overall expense of software (60 to 80 percent)
relative to the whole system, and due to the fact that numerous failures are software connected, more
emphasis is now being given to concerns for ensuring the reliable operation of the software system.
Once again the mathematical and statistical community is a source for considerable insight into this
problem area since they are well-qualified to address:
l.
2.
3.
4.
Quantification and measurement of software reliability.
Assessment of changes in software reliability over time (reliability growth).
Analysis of software-failure data.
Decision logic for whether to continue or stop testing software.
A fault-tolerant computer is one whose key features are the automatic detection, diagnosis
and correction of errors (faults). A review of the existing literature shows that a satisfactory solution
addressing this problem is not yet available. In particular, the research gap is evidenced by the fact
that existing material is mostly qualitative; there appears to be potential for valuable contributions inthis technical area.
In addition to the areas mentioned above, other areas that research in this technical area can
be of particular aid in regard to problems of interest to NASAJJSC include the following:
l°
2.
3.
4.
°
6.
7.
Math modeling of physical systems.
Simulation.
Statistical data reduction.
Evaluation methods including robusmess (stability), sensitivity analysis,
perturbation theory, error analysis and development of test criteria.
Optimization.
Algorithm development.
Mathematical methods in signal processing.
N91-18622An Overview of the
Education and Training Component of RICIS
Glenn B Freedman
Research in education and training focuses on means to disseminate knowledge, skills and
technological advances rapidly, accurately and effectively. A range of areas for study have been
idcntified including artificial intelligence applications, hypermedia and full-text retrieval strategies,
use of mass storage and retrieval options such as CD-ROM and laser disks, and interactive video and
interactive media presentations.
The Education and Training area also provides necessary support activities for dissemination
of rcscarch information from the other research areas. Further, this area serves as a link among the
Univcrsity, corporations, and government for information on training, curriculum development and
education services.
Among the first-year accomplishments of education and training and practitioners research-
ers were the following:
l°
.
.
.
.
.
.
8.
market survey in software engineering and Ada training
establishment of the Software Engineering Professional Education Center
establishment of UH Clear Lake Software Engineering and Ada Training Forum
delivery of a hypertext training system for Ada
delivery of a software engineering training film for upper-level managers
creation of the course "Introduction to Software Engineering for Managers"
development of the course "Software Engineering and the Transition to Ada"
application for affiliation with the Software Engineering Institute
N91-18623
INVITED TALK
A NASA Initiative:
Software Engineeringfor Reliable Complex Systems
Lee B. Holcomb, Director Human Sciences
and Human Factors, OAST, NASA Headquarters
Invited Talk
A NASA Iniative:
Software Engineering for Reliable Complex Systems
Lee B. Holcomb
The objective of this initiative is the development of methods, technology and skills that will
enable NASA to cost-effectively specify, build and manage reliable software which can evolve and
be maintained over an extended period. The need for such software is rooted in the increasing
imcgration of software and computing components into NASA systems.
As a result, the size, capability and complexity of NASA systems are increasing rapidly.
This growing complexity causes a number of significant software issues. The prevention of software
failure becomes critical.
Improvements in software productivity must catch up with and keep pace with software
complexity. Functional descoping that has been caused by software complexity must be eliminated.
And, the enormous maintenance costs generated by complex software must be reduced.
Current NASA Software Engineering expertise has been applied toward some of the largest
reliable systems including shuttle launch and ground support, shuttle simulation and minor control
and satellite tracking and scientific data systems. Research in NASA focuses on Software Engineer-
ing in Management and Environments, Fault Tolerant Software/Reliability Models and Performance
Measurement. Several other governmental agencies, DoD, SPC, SEI, DARPA, NSF, AF/RADC and
MCC are conducting related research but none specifically focusses on reliable software or manage-
ment of complexity. In fact, no theory exists for reliable complex software systems.
NASA is seeking to fill this theoretical gap through a number of approaches. One such
approach is to conduct research on theoretical foundations for managing complex software systems
The focus of this research includes communications models, new and modified paradigms and life-
cycle models. Another approach is research into theoretical foundations for reliable software devel-
opment and validation. Research here focuses upon formal specifications, programming languages,
software engineering systems, software reuse, formal verification and software safety. Further
approaches to address the need for reliable complex software involves benchmarking a NASA
software environment, experimentation within the NASA context, evolution of present NASA
methodology, and transfer of technology to the space station software support environment.
azILl
LU
m
F-0LU
rn0
LU_J
Z0I
F-
rr
uJ00I--0:::!!1I'1Xi11
ZIT'iiiIii:2
ZLuuJrr
0
Z
I0G_
w(I)W
aw
_.J
wG_
I0
0GZCL
G_WU_
Z
GZ
CO0_J
0ZI0wh-
m
n-WUJZm
(_ZUJ
rr¢C
_L0O9
m
m
F-roZI
<{(/)<{Z<{
(n
111
>=
X
00
m
==IW_C
_C0U=
LU.Jm
ZLU
RO9
._Jm
vO0
aZ
>:
80Z
oUJh-
oGr_0-rh-uJ
a.0..JUJ>UJr_
R
UJ(.0
Z.<
aZ
t,h
r_._Jm
m
UJa.O0
>-..JLU>m
h-oUJELELUJ
!
F-oo00
0b-
OO
Z
r_Z
uJ_JQ]
._J0>UJ
O9m
-ro-r
LUrr
0O0
XUJ
Q_
00
UJ._Jnn
m
..JLUrr
m
h-
EL0r_0I
rruJQ_
auJaZUJI-XuJ
Z
rrLU>0LU_Jm,<Z
Zm
Some "Perspectives" of Software Development
Specifl_ Appl_a#on Domain
Req. NewApp. Sw.
COTS/ Modified COTS
App. Software
Required New
System Software
COTS/mod.COTS
SystemSoftware
iii i
Hardware
..._'.'_ "i' i".- i" _'-" , i'.i .i ii" i.'.'., i '. i-'i'-i, .i "i..-i.'- i" " ---.i .i - . "I."'I.'.'I.".'I,'-_'I.'L'I•"'I-':-I."I.".I.-.'I."_';.'-.
CSSE View of Requirements
Hard Work
Some "Perspectives" of Software Development
COTS
SystemSoftware
___ Hardware --__
/iV
COTS Panacea View of Requirements Work/Play
(D
OO..O
a..
Cl) "O
,.. I::CDe's
=: Eom
o EC
eu
:_ CDO" r.--
O
CD=line
om
°'='='
c-
oL--
e'-CD (D
EOR
m
CD ""e_ O_I L..o_
e--._:: a)
O
oi
O
cg=O
"10
O co
o,m=,
o,==,-m
o O..
e- t_lo
on
e=" cD
Op: ,-:
m
CD t_lI
EEiI
e=" e.-o==_
,=#_#x
(D
_e-O O
eu
=#,==eom
1::: oOO.
O _I
"I_ e._e-' O "*-"
o_
- E._
e-' e-" ----
"-" 1_ ID_ 0 _
"0 o_
0 "_
c_Sm
mm
Ct_m
A
LU
Ct_C_
DN
Ibm.
CDQ_
el
nnn
Q_lhn
-OralQit, m
0Ct_
"0cmtics
Ea_
iO.mm
Lm
Q_njmm
E0
C_
A
Q_
_BCD
Ibm
a3Q_C_a_
D_jeD
QI
CDQ_
om
W
Q_Ibm
c_S
O
v
tr-ILlCt_
A
C_LW
W
g_ommm
_Bom
c_L.n
C,_ 0ibm
Ibm .gram
a_ c_Q_ c_
a_nnn
a_ct_c_
q,mmmLm
CD
r--u
TWO SEEnRRIOS FOR
SSP EnUlROnmEnT
In ;_ooo+ R.D.
x X X X _ 0 0 0
o o o
HOSTEnUIROnmEnT5:
• OEUELOP
• 5USTRIn
InTEI;RRTIOnEnUIROnmEnT:
• CONTROL OFTGT. EnUIR.
BR.SELIFIE
• InTEGRRTIORU6"UFOR nEXTBRSELIRE RRO
TEST 6'InTEI3RRTIOn
PLRRS
TRRI3ETEnUlROnmEnT5:
• DEPLOY
• OPERRTE
0--I0r_0
I--LIJ
<C
.<Z
p.ZI11(/)111rr{1.i11
J0>UJ
WC9aLU._J
0Z,,,,,
Z
ILl09ii
l--rru2
XuJ
ml--.
n_l-W
:31'I--U.I
,,_,<C)m
ZUJ
Z0n"I
ZLLI"700p-
CC0LUn"
aIJJ00CCQ.
0
ZI
n-OIJ_COZ
crI--
KEYNOTE ADDRESS
The Real Technologies in SpaceStation Information
Systems
John R. (Jack) Garman, Director of Information
Systems Services, Space Station Program Office,
NASA Headquarters
Some "Perspectives" of Software Requirements
Static View
Dynamic View
Static "Gains"+
Software Development Team
Funcional and Nonfunctional Requirements
Behavioral Assertions
Software Quality Mgmt. Team
Funcional and Nonfunctional Requirements
Behavioral Assertions
Hardware Target Team
Normal and Exceptional CFg
Ojw/amic Irmw of So_/_ I/oquir_n_T/s
EDUCATION AND TRAINING
Conveners: Glenn B. Freedman, UH-Clear Lake
Amy B. Kennedy, Employee Development,NASA/JSC
Review of the Education and Training Activities
Glenn B. Freedman, UH-Clear Lake
Sue LcGrand, SofTech,Inc.
Software Engineering and the Transition to Ada
John McBride, Sofl'ech, Inc.
Computer Based Ada Training Using Hypertext Systems
Sue LeGrand and Gilbert Marlowe, Sofl'ech, Inc.
Mr. David Auty __! "Teeing and Verification of Ada Flight software for Embedded
computers." This lmUtentafion focused on the issues of storage management in Ada. Mr. Autydescribed certain aspects of the language which, if misused, could lead to errors which are difficult
to detect. Examples include global variables, exception propaption, dynamic task interactions,
generic subpmgran_ patan_ters, and dynamic storage allocations. He distinguished among good
software engineering approaches to ufifizing these features, compiler dependencies which affect
these features and the critical role of the run time support environment int he robust and correct
management of storage. He then described some of the reco_tions and guidelines that have
resulted from this study.
The final presentation of this session was made by Dr. Morris Liaw. Dr. Liaw and his col-
league, Dr. Anthony Lekkos, recently delivered an operational Software Engineering and Ada
Database. He described the objectives and the history of the project as well as the architecture and
the features of this unique resource. He further described the methodology used in design and
development and concluded with the description of the planned enhancements for the future. A
second release will be available in January 1988. The resource is being used by JSC, UH-Clear
Lake and JSC's aerospace contractors.
Summary of tile
Education and Training Technical Session
Dr. Glenn B. Freedman
in the first presentation, Dr. Freedman reviewed two RICIS activities. He first presented the
results of a contractor survey completed in Fall, 1986, in which 21 NASA contractors were inter-
viewed to assess the extent to which they had undertaken software engineering and Ada training
programs locally, what their perceptions were about these areas and what their plans were for train-
i_lg and educational activities for the next twelve months. The results indicated that at the time of
the survey and interviews, the contractor community had very little software engineering training
plam_cd, but wcre beginning Ada syntax training, even though there was little Ada work in progress.
"l'hc iatcrvicwces indicated that the commitment of NASA mid-level managers toward Ada was not
fi_m and that this perception affected training plans. As one personnel person commented, there was
"Ada talk from on high, but no Ada action."
OIhcr findings were that the contractors had hardware, compilers and various tools available,
they the general consensus at the time was that the tools and methods for Ada were immature.
"l'raitling was typically defined in terms of language syntax and semantics, with little regard fo,r the
Ada culture that supports software engineering principles and goals. Interestingly, the companies
perceived that there were sufficient numbers of programmers available, but few software engineers
and design experts. Nonetheless, little in the way of design and software engineering training was
pl:mncd. One of the most consistent findings was that no "transition to Ada" plans were mentioned,
cvcn though each company recognized that Ada would become a language they would be using andthat the transition would be resource intensive to some extent.
Frccdman also reported on the development of a number of training options for the aerospace
community. On of the options was a videotape featuring modules about various aspects of software
cngineering. The tape, geared to upper level management, contains four modules: The Cost of
Software, Software in the Space Station Era, Engineering Software and Building a Software Engi-
neering Environment. A second development effort resulted in a one-half of three day presentation
covering software engineering and the highlights of the Ada programming language. Other efforts
led to an Ada glossary, a PC-based data base of software engineering and Ada training options, text
resources, conferences and other educational and training information.
Among the deliverables to NASA there has also been a model for a comprehensive software
engineering curriculum that features six planning dimensions and alternative training methods.
Also, Freedman discussed the programs of the Clear lake Software Engineering and Ada Training
Forum, a monthly meeting of training experts from universities and industry, and the Software
Fngineering Professional Education Center, a complementary center to the Software Engineerirrg
Research Center that enables the university to offer a full range of services and research to the
software engineering community.
Summary of the Computer Systems andSoftware Engineering
Technical Session
Charles W. McKay
Because it was impossible to provide a meaningful presentation on more than 18 NASA
funded activities as well as an even greater number of company funded activities that are coordi-
nated by this component of RICIS, five related activities were selected for presentation. Mr. Pat
Rogers introduced the five activities and then presented: "Lifecyclc Support for Computer Systems
and Software Safety in the Target and Integration Environments of the Space Station Program:Approaches to Fault Tolerant Software Systems."
Safety was defined as "the probability that a system, including all hardware and software and
human-machine subsystems will provide appropriate protection against the effects of faults, which,
if not prevented or handled properly, could result in endangering lives, health, property and environ-
ments." The past and present approaches to mission and safety critical components have been
addressed through a static perspective of fault avoidance (i.e., considerations in the host environment
only). That is, the development team was encouraged to design as well as possible to keep defects
out of the system. The quality management team was encouraged to test as well as possible to
identify defects that made it through the work of the development team so that the defects could then
be removed before deployment. Post-deployment support depended almost entirely upon hardware
techniques (e.g., redundant processor, built-in-tests, error coding) to sustain mission and safetycritical components at nm time.
Mr. Rogers advocated the CSSE team's position that a dynamic perspective of software
assessment and control of run time behavior in the target and integration environments is needed to
complement the static perspective which has previously been emphasized. Specifically, as shown in
Figu_ 1, additional software processes should be deployed in the target environment to accompany
all mission and safety critical components. For applications programs, these additional processes
help to monitor the behavior of each of the critical components. These processes are needed to
insure the fastest possible identification of faults that have entered any potion of the system state
vector, to firewall their propagation, to analyze which of the predetermined recovery mechanisms
are most appmpriat_ and to effect recovery. At the systems software level, such processes apply to
all shareable services and resomces which mission and safety critical components of applicationsoftware depend upon.
Mr Rogers then described the CSSE team's proposal for a Portable Common Execution
Envkonment (PCEE). The two principal components of this proposal are an extended run time
support enviromnent libraryand a Mission and Safety Critical (MASC) kerneL Underneath the
MASC kcnw.l me 12 distinct but highly interactive models believed essential to maximize the sup-
port for mission and safety critical requirements. Figure 2 depicts the extended run ring library
model and Figure 3 depicts the list of 12 models underneath the system interface set of the MASCkernel.
COMPUTER SYSTEMS AND
SOFTWARE ENGINEERING
Conveners: Charles W. McKay, UH-Clear Lake
Stephen A. Gorman, Head, Application Systems,Spacecraft Software Division, NASA/JSC
Fault Tolerant Ada Software
Pat Rogers, UH-Clear Lake
A Study of Converting PCTE System Specifications to Ada
Kathy Rogers, Rockwell International
Proof-of-Concept Prototype of the Clear Lake Model for Ada
Run Time Support Environment
Charles Randall, GHG _tion
Testing and Verification of Ada Flight Software for EmbeddedComputers
David Auty, Sofrech, Inc.
Ada Programming Support Environment Data Base
Morris Liaw, UH-421eax Lake
c--0
em
C._ 0e_
0 "_lu
C.) cO
0 0
oo t--"
E
0
.+--_
°_
0c_
O- or_ c-
t'_ (Dct;
cz_ --Ic- --_ 0.o o_ ¢'- N
_ o _e-.. -o
¢_ e.- L_
e--. ..'_
e-.- (1)
E O.
m
0
e'-0
I
0
I
e--
c-
o
o
Emu
e.-
m
mm
¢.-e_
c_
tm
-r-
0
¢-.
0_m
0
E
_, c'-co 0
tJ_
r-- c-
¢- ......L__
E0
0 O_
c- -l_
a_
(i_ ----
_-" e-
a_
t-"
O0
m
t-Oo_0
0
E
0
O0
m
O0t-O
el
0
O0t--CO
-0
(l)t--
(l)
oi
om
0
E
r-
E
e-
E
em
_m
t- 0
0 _-"
oo 0
cO 0 00 ---" L_
¢-t" 00
cO X "--
O_ t.) .__om
°_
_- E o-- CO c'_0 _-.,_.. _ X
I o(1)
c" __cO (D
o._m
em
co _ o
E CO _-" "--"m
•_ CO
ol
-_
.prop
c_
c_S
Im
_. imO
z
i J................° _C_
Q_Ld
c_J
_Lm
c_--r
,ml
Im
X
i=-
Q_
E
O
W
,4ram
0
=T=
m
_m
E
OIi.
el
LLI
c_
C_
C_
3mo
3c-m
nl
m
el)
m
CD
C--
me
mo
,,-=ll-
ml
¢D
qm_le
0
(I:)
mo
0
3
._==_
D>
_oml
m
0
_o_D-
_D
--Ior)m
o_(D
_D
0
('DO_
O_e-
o_
o_
CO
COc-
o,=_
,=_
CD
0
0
O_
v
CO
I
i---O0
I_,..Im
m
Z
L_
0Q.
0
mm
0
,,_.1I--
L
(.-lu
,_.1
im
O-
N
0
0
C--"
X(1)
u
G.)u
__.iI---
X
0i..i_m
0
ILl!--
e
c_
Im
t_¢.-
0Q_
O. _Q°:'-
x E"_ 0
,"," ECD
m
0 _,_
m mm
I.L.IILl
i u--41- ._
Z:I_O 0 ,-._.
..,_ o__ :zlco0 "<(D 3_
m____:::I 0'}(.C_
I:}_f-n I:::0 (D
A
C'J0
3io
n
(D
I0
{D-
(DC)
(')0
O_(D
v
(I)
3
i
(D
(Df.n
0
i
ne
"ID
0
(I:)f_
0
I{D-
I:D
(D
CI.
(D
(D
C
O_
(I)
(D.<(Dm
0
3(I)
II
V
,,<
=Imo
C')
mo
0
mo
ng
(I)
q,m
0(.-.
CI.(DO_
Cl.(Di
,,,.<f.wrj
w
"-rl
mo
(D
"0
(D
(-,;
(.-.
(D
m
,.<
il
V
(.-.
me
"{D
00
0
I
O_
_u
0
u
0
0
(I)
0
-TI
(I)
O_
0
im
0
c-
ml
(1)
m
o
u •
0
Oc-
CDc-
.e..#
C"mm
(I)
CD
"tD-CDc_
>.,m
<D
tD"(3)
ctS
Ii
->.ci)
c_
c-O
mu
im
OOom
tD-
ctS
c--(I)
ECI.O
m
(3)
(3)
Oc-"
O
c-
.9.-#
c-(3)
E
OL--
Dm
:>e--(3)
>,,
(D(3)
E_O
iI
,.e.--
O c-
(3)¢o c_
-C3 c-(3) Oco el.C.O
c---O CDctS "_D
-- CD
.____ _
X _
mm J
_m
0 c-
-*--., 0 e-_ om
0 _ _
mm
om
a_
e- 1_. c-
c_(--
(:D o
"ac.- i_
E
•.- c-0 "_
mm •
0 e-
e.-0
Qm
ct_tD_ct_el.O
el.
em
CDc-
C_
CD
Bm
LL.
CD
(3)
em
<Dc-
(3)N
m
ctSc--
m
(D
ct_r,o
<D>O
(I)ce"
0
BQ
0
Im
O0
ml
e-
30
m
C_
30
CDm
0
c!3
_Dm
ml
§-
O0
3
.--IO0
v
me
mo
0
O0
CD
ml
mo
m
O0
v
C!3m
Z0
q-
q-D
Im
oa
O0
u
C'D
CD
0t.--
O0
il
CI3O0
1-17X
CO
_D
c--
CD
l--le
O0m
i-17i-17
o
c-.CD
CD
O
(3.)
q,m
m
C'--
m
Ov
E EG.)
OO
-r-m m
i, I.I_
ECD
O
_YJC-am
O
O
O
em
c-.CD
(I)
mm
m
i,
O
mm
CD
C--"mm
(I)m
Dm
CD
wm
NIm
c-.
O
(3)
m
I.I_.
O
Oim
om
m
Q_
(1)
O
E
em
E
CDm
O
O
G.)
m
m
IE
Q_
(D
O c-
_-" ZX(D O
O r- _x_E -- -I_
"--
U_l _ c-O
U_I _ ---
I__ O _-
(_ _ (2)
I-- _ .--
c-CD
im
Ic_
c_r'_
E11
m
ct_(D
e- O "t_
O am
QN
LH _ f_0mm
,,i,,,,,#
c--CD
E
ctSe--ctS
E
c-O
im
,4,,,,a
ct_
em
c-O
O
c--
OQ_
c_tOOIi
A
J
CD
oR
CD
(2)
om
ctl _¢I)
CD O
I a_
ct_E c- oOf._ c-
O c----- O
c- ct_
.m
O m _Em
_-- £3_ ¢-_,,i,,,,,#
c- ¢_ c-_O _ ct_
_ c- c-O _ ¢t_
"" E Ee-.--. i_ i_0 _ _
c_00
u_
E
E0¢o
0 _
(I) c-o c_cts __I
el)
c-
EE
¢_0 Oa_ ¢.3
iiiv
c-O
om
ct_,,I,,-#
c-(D
_D
(I)
c_c_
ctl
m
_D
Oc_
_m
_P
c_
m
m
c-lm
m
(DC:
ol
(D
c_
cole--
>.,lu
m
mm
c_c_O
C_.
c-
(D
OO
(D
sB
O
om
_c:
O
o,,-- _')
em
.(DtD_ .--.
:_ CDE m"
>, o __ £DO9
"-_ O (Dc--
,_- q:D CD
c- ::_"-- CD O c-c- _C:: O O
E E e..-_ o---
E
e-- o
e-- (3.)
ct_ OL__
c_ I:D_ -,-"c_
_ L--
_ O
e- I_.
m
O
1:21..
m
e--c_e-.
O
c'-
sm
e--
c_
o
c.-
m
c_
m
/x
II
v
OL_
e.-
o
Q.0
t--c_
•--- ¢o
em
0"--" c"
c_:l e'_ I:DL_
C_
e-,- ¢,_ r-.
_a
t-
O
e.-mm
12)
m
/X
IIII
m
e-
oe.-
c-O
L__
r.-
O
O
Im
m
-OO
O
CO
(--(Df_(_
CL
O
(].)
(1)>
O>
.,<
>
(.-.(D
F:(--
C)mm
am
--,-
(--
el
f_ f_
"-r- :z_
O °_
(I,)
Z
om
m
rr"
(Dem
m
(--
C.)
Q,)
m
(I,)
Ec-O
Bm
>
(D
F--
-'a(...
c-o
(i.)
(.-
a:i
(D
,.Qim
im
C_
(I)
OC_
(.,-
(-.(I,)
E
O
om
(--(I.)
(I)(I)
(.-.
O
f_
(I.)
f_
mm
C_m
O"D
(3_
C._
(,_
O
F--O
I
C._m
(_
C..)
Some "Perspectives" of Software Requirements
t!:::::::i:::::S .,. ,, ,. _. ,., . ::::::: ii:::
I n iii!_iiiiii!iiii. _i_._i_:._pe_,,_ '^pp,,c.uon _°_"i
i fill ii:i _211"_iil)i:i_;,
/"J"."".-'.'."-" '/" ;" i i
".'" .".' :%"." "'."Z ""
, o° ...- .° .'..........o ._ k.." .....o : .. : ..'°.°.
iiiiiiiiiiiiiiiiiiiiiiiiiililiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiliiiii!iiiiiiiiiiiiiiiiiiiiiii!iiiiiiiiiiiiiiiiiliiiiiiiiiiiiiiiiiiiiii!iii!iiiiiiiiiii;iiiiill!iii!iiii!iiiiiii]Static "Gains"+
Software Development Team
Funcionai and Nonfunctional Requirements
Behavioral Assertions
Software Quality Mgmt Team
Funcional and Nonfunctional Requirements
Behavioral Assertions
Hardware Target Team
Normal and Exceptional CFg
Oynam/c I//ew of So#warn tlequ/mmenls
Some Examples of CSSE Activities
CSSE / SERC Research Examples
" See Thursday's presentations
CSSE / SERC Education & Training Examples
See Dr. Freedman's SEPEC presentation
CSSE / SERC Research on Interfaces to :
AI / Expert Systems
Project with :Inference, Intellimac,
JSC / MPAD, UH CL
Information Management
IRDS
Object- Based Management Systems
U of Colorado, Boulder*
Math/Stat Analyses
Metrics /Instrumentation Design
U of Maryland*
Reliability Modelling
Purdue*
* Reusability : UHCL + 6 others universities
Some "Perspectives" of Software Development
Specif/_ Appl/_a#on Oomain
Req. NewApp. Sw.
COTS/ Modified COTSi i
App. Software ......, . . .,.',
Required NewSystem Software
COTS/mod.COTS
SystemSoftware
CSSE View of Requirements
Hard Work
Some "Perspectives" of Software Development
Req. NewSw.
COTS
System
@
_._) Hardware
COTS Panacea View of Requirements Work/Play
(1)
OO.O
(I)
C_
0)
O
"Oe--col
E{1)
ALUILl
v
e..-Q)E
OL--
em
ILl
t-O
EO
O
m
o)
O
el)
.....I
Q)m
o(1)X
ILl
OEEO
0)m
eci
o
0)0) "o
ecl_-- E
e--4.-, _,
col_" EON
o E_. O
om
(I) OC_ om
..Q -,--,
O e"ol
E _1o
e--Q) 0)c EQm
m
(1) e-.-_.j Ocol i..om
..Q _,e.--
(I)
O
O..
Eo_lD
O
O"O
0)m
OC_
O ¢::
col
m
_" col
em
m
O,.2
E_mm
/
-_ E
_" e---(_ °-,--
x _,
em
e--.m
1::I oO "4-"
_3. "C3_-.
O c_
"0 r._ _.__- ¢_ ._.c_ ---
o,_ 0 c_
"--" O _--::3 "0 O_: o
em
C_ c_
e- e" ----
m E o
m
.-- e-" _'--m
i_. _ "_'
O _--
O "O
O
m
c_I
I
Iii.
c.rbI
C)
rr I
A
iii
¢0
c-eJ
CD¢De-
l iiiiin
ci.iiI
0
"0¢...0_
ECD
¢/)
L
¢1)
E0
C_
¢D
¢:=¢D
¢.,.¢.)L-
¢0
¢Del."
¢-.om
L-
(¢p
e-oI
¢:::LL!
¢D
¢0
0
¢:¢::LLi
ILla..LLI¢,/'J
e-.oI
c-om
¢¢1L
I----0e.-¢0
.j_ ¢-¢b 0
omlIm
L-- ,,_
¢0 ¢¢1(Z> ¢J_
¢D"OCI_ I.IJ
¢Z>
(3)
r-m
Eu'J
:>..m
rI_ iX ¢I_mII ¢_
IiI
ipii
¢D ci_
cI. _=-
"-- _ II
OR_i. 0n
im
.0=i,n
_i 0IiI
In
Z0I--
__ o_ __ onwZfr Z _ w _ a0 _W
t,_w_(_ I-.X I-- w
U.lw wn- cO0 Z _ 01._.--In"
o_- _ _- :" °o
_-o _'o _ _I- LLI-r(. 9 7-oo
O:-J _ WI:I:
w._ w__ __w"_ ww _0rr_ _rr a_ X
w w I-- o'_
f
TWO SCENARIOS FOR
5SP EnUIROnmEnT
In _ooo+ R.O.
® x x o °X X _ 0 0
X . X _ 0
x ® x x /-'_ o ox x _ _- ° o
HOSTEnUIROnmEnTS:
• DEUELOP
• SUSTRIn
InTEGRRTiOnEnUIROnmEnT:
• CONTROL OFTEiT. EnUIR.
BRSELlnE
• InTEGRRTiOnU6"U FOR nEXTBRSELInE RnO
TEST 6,InTEGRRTIOn
PLRnS
TRRGETEnUIROnmEnTS:
• OEPLOV
• OPERRTE
o_
LUll:
ZI_.0
O_I,I=I,I.I._I__'
LLI
oZ£/) "-- (.9' 0
0 Z n"W .-- O.a.. =E W
CO
WI--GO>..
Zm
n"ILlI.UZ
Iz:OI,I=
co _ n-
O _ 0U_ O. O9
Z W CO '_-- LI_
-- W U. ,,¢:
W...j I:I: W LLI W0 w 0: > rrI-- I-- _ ...j ,,¢:
_ O.
_ _ u.. n'- ,u._ 0 0 0 0
0 O9 U. O9
O9LU-r0<0III1.O_
WR
u_n
l--ZUJaI
n-w7-l-O
>=
0
0
0
I--LIJ
Z
F-ZLU(/)UJE
LU>
0
LU
IiiC9E_W/
0Z
Z
iiiCO
I--IT"Ii'IO.XUJ
O_nr'_O-I_Cl--Wc/)o.O×_wwI_C
g,,oI-..W
l--ZW
Z0n-
ZW"700I--
0W
aw00n-o.
0
Z
n-Ou_O_Z
rrI--
Some "Perspectives".of Software Requirements
i!!iiii!!ili!::il;S pecificApplication Domain-:!iii::::!ii:::::I.'..:.'..;.'..:;.°:;...,.
,..' -..," ...'.., ,'..,..".,
::::::::::::::::::::::::::::::: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::
:!!:iii:iiiiii!iiiii:!iii!:iiii!:Static Viow :::::::::::::::::::::::::::
iiii!;!!iiiiiiiiiiiiiii!!ii!i:iiii!iii!iiii!i:iii::i:ii . ." ...- -..'..° ; °, .'°-
:.-:_....::..;.-..:.-..:. • • -.:....'.:..2.:..-.:..2.:.-_
ii!ii:ii!i!ii!ii-ii:!:-!i:ii-ilDynamic V_ew lili)iiii!!iiiii!ii}i!iii}!l".':"::-.':: _::-.'.'-. _'.'3v2.'.":'.'3v _
°-o, ,,.° ."_ °'°oo .'o°, -.-.%°,-,-.... ",* • "_
Static "Gains"+
Software Development Team
Funcional and Nonfunctional Requirements
Behavioral Assertions
Software Quality Mgmt. Team
Funcional and Nonfunctional Requirements
Behavioral Assertions
Hardware Target Team
Normal and Exceptional CFg
_jvnamZc llTew of _oflwar_ li'_uir_m_nls
( ",,y....-t q'
KEYNOTE ADDRESS
The Real Technologies in SpaceStation Information
Systems
John R. (Jack) Garman, Director of Information
Systems Services, Space Station Program Office,
NASA Headquarters
em |
0
"- I_
,eo :__
_s) O O I Oof ,imie.- _ __ Z
ibm
0 I.U E_.
0c3),-
::3O_ (/)in,
&=Q. a_
"{3
0 0
'{3 C0 "--
QP
(3) i
_m_ i
aaalf I
O IO'3-1
ct_ I "-•._ i _
on
_E00
0Z!! /
!--1-
O
..,,J
I"-'-
>.<
h
]-J=_
,_,,il O _ "_
,.5_,=
///
(,,,,.
/kI
i
e,,"' !I
!!I
O)
(-.,a3
Er-Oa,.,,.
em
L,U
(:3OH
k--
{:3')
i
OE
OQI
U,J
43,)
I..-,L
Mr. David Auty presented "Testing and Verification of Ada Flight software for Embedded
computers." This presentation focused on the issues of storage management in Ada. Mr. Auty
described certain aspects of the language which, if misused, could lead to errors which are difficult
to detect. Examples include global variables, exception propagation, dynamic task interactions,
generic subprograms parameters, and dynamic storage allocations. He distinguished among good
software engineering approaches to utilizing these features, compiler dependencies which affect
these features and the critical role of the run time support environment int he robust and correct
management of storage. He then described some of the recommendations and guidelines that have
resulted from this study.
The final presentation of this session was made by Dr. Morris Liaw. Dr. Liaw and his col-
league, Dr. Anthony Lekkos, recently delivered an operational Software Engineering and Ada
Database. He described the objectives and the history of the project as well as the architecture and
the features of this unique resource. He further described the methodology used in design and
development and concluded with the description of the planned enhancements for the future. A
second release will be available in January 1988. The resource is being used by JSC, UH-Clear
Lake and JSC's aerospace contractors.
EDUCATION AND TRAINING
Conveners: Glenn B. Freedman, UH-Clear Lake
Amy B. Kennedy, Employee Development,NASA/JSC
Review of the Education and Training Activities
Glenn B. Freedman, UH-Clear Lake
Sue LeGrand, SofTech,lnc.
Software Engineering and the Transition to Ada
John McBride, SofTech, Inc.
Computer Based Ada Training Using Hypertext Systems
Sue LeGrand and Gilbert Marlowe, SofTech, Inc.
Summary of the Computer SystemsandSoftware Engineering
Technical Session
Charles W. McKay
Because it was impossible to provide a meaningful presentation on more than 18 NASA
funded activities as well as an even greater number of company funded activities that are coordi-
nated by this component of RICIS, five related activities were selected for presentation. Mr. Pat
Rogers introduced the five activities and then presented: "Lifecycle Support for Computer Systems
and Software Safety in the Target and Integration Environments of the Space Station Program:
Approaches to Fault Tolerant Software Systems."
Safety was defined as "the probability that a system, including all hardware and software and
human-machine subsystems will provide appropriate protection against the effects of faults, which,
if not prevented or handled properly, could result in endangering lives, health, property and environ-
ments." The past and present approaches to mission and safety critical components have been
addressed through a static perspective of fault avoidance (i.e., considerations in the host environment
only). That is, the development team was encouraged to design as well as possible to keep defects
out of the system. The quality management team was encouraged to test as well as possible to
identify defects that made it through the work of the development team so that the defects could then
be removed before deployment Post-deployment support depended almost entirely upon hardware
techniques (e.g., redundant wocessors, built-in-tests, error coding) to sustain mission and safety
critical components at run time.
Mr. Rogers advocated the CSSE team's position that a dynamic perspective of software
assessment and control of run time behavior in the target and integration environments is needed to
complement the static perspective which has previously been emphasized. Specifically, as shown in
Figure I, additional software processes should be deployed in the target environment to accompany
all mission and safety critical components. For applications programs, these additional processes
help to monitor the behavior of each of the critical components. These processes are needed to
insure the fastest possible identification of faults that have entered any potion of the system state
vector, to firewall their propagation, to analyze which of the predetermined recovery mechanisms
are most appropriate, and to effect recovery. At the systems software level, such processes apply to
all shareable services and resources which mission and safety critical comlxments of application
software depend upon.
Mr Rogers then described the CSSE team's proposal for a Portable Ccmunon Execution
Environment _. The two principal components of this proposal are an ex_ run time
support environment filmwy and a Mission and Safety Critical (MASC") kenteL Undeme_uh the
MASC kcmel are 12 distinct but highly interactive models believed cssontial to maximizc the sup-
port for minion and _'ety critical requirements. Figure 2 depicts the extended run time library
model and Figure 3 depicts the list of 12 models underneath the system interface set of the MASC
kernel.
Summary of the
Education and Training Technical Session
Dr. Glenn B. Freedman
In tile first presentation, Dr. Freedman reviewed two RICIS activities. He first presented the
results of a contractor survey completed in Fall, 1986, in which 21 NASA contractors were inter-
viewed to assess thc extent to which they had undertakcn softwaxc engineering and Ada training
[,rograms locally, what thcir perceptions were about these areas and what their plans were for train-
ing and educational activities for the next twelve months. The results indicated that at the time of
the survcy and interviews, the contractor community had very little software engineering training
I,Izmncd, but wcre beginning Ada syntax training, even though there was little Ada work in progress.
"l'hc intcrvicwecs indicated that the commitment of NASA mid-level managers toward Ada was not
finn and that this perception affected training plans. As one personnel person commented, there was
"Ada talk from on high, but no Ada action."
Other findings were that the contractors had hardware, compilers and various tools available,
they the general consensus at the time was that the tools and methods for Ada were immature.
Training was typically defined in terms of language syntax and semantics, with little regard for the
Ada culture that supports software engineering principles and goals. Interestingly, the companies
pcrccivcd that there were sufficient numbers of programmers available, but few software engineers
;rod design experts. Nonetheless, little in the way of design and software engineering training was
phmncd. One of the most consistent findings was that no "transition to Ada" plans were mentioned,
even though each company recognized that Ada would become a language they would be using and
that the transition would be resource intensive to some extent.
Freedman also reported on the development of a number of training options for the aerospace
community. On of the options was a videotape featuring modules about various aspects of software
cnginecring. The tape, geared to upper level management, contains four modules: The Cost of
Software, Software in the Space Station Era, Engineering Software and Building a Software Engi-
neering Environmenc A second development effort resulted in a one-half of three day presentation
covering software engineering and the highlights of the Ada programming language. Other efforts
lcd to an Ada glossary, a PC-based data base of software engineering and Ada training options, text
rcsources, conferences and other educational and training information.
Among the deliverables to NASA there has also been a model for a comprehensive software
cngi,_eering curriculum that features six planning dimensions and alternative Iraining methods.
Also, Freedman discussed the programs of the Clear Lake Software Engineering and Ada Training
Forum, a monthly meeting of training experts from universities and industry, and the Software
I:mgineering Professional Education Center, a complementary center to the Software Engineeriag
Research Center that enables the university to offer a full range of services and research to the
software engineering community.
COMPUTER SYSTEMS AND
SOFTWARE ENGINEERING
Conveners: Charles W. McKay, UH-Clear Lake
Stephen A. Gorman, Head, Application Systems,
Spacecraft Software Division, NASA/JSC
Fault Tolerant Ada Software
Pat Rogers, UH-Clear Lake
A Study of Converting PCTE System Specifications to Ada
Kathy Rogers, Rockwell International
Proof-of-Concept Prototype of the Clear Lake Model for Ada
Run Time Support Environment
Chades Randall, GHG Corpm_lion
Testing and Verification of Ada Flight Software for Embedded
ComputersDavid Auty, SofTcch, Inc.
Ada Programming Support Environment Data Base
Morris Liaw, UH-Clcar Lake
:E
u_
HI
I,,-
Z0
I,I1,1a
I-,q_
8L
Z0
n,,,,, 0qDOo,, Z
0 c',q• O p.,
O_ eo
0W t-w Z
i
m 0 Q
0 < wZ o
0ee
0
n.0
iL
,.°
• :.. •
gOFI"V_AR; _;NGIIk_IRING WITi4 ADA:IA DEIqNmON OP 114G _It;LD
WITN CURRICULAR OPTIONG |
J
II.I
JOB D_£CRIPTION I
2. iI
i
ACTiVITIE-
CONTROL
//////
/////
$ M L T A CE E A 0 $ O
T N 0 S MC H G L E MU 0 U _.S. S. UL D A $ NT $ G M IU E E CR S N AE T T
S ION$
13. S_ARE GNGINEG'RING KNOVVLEDGb" I
I 4. ENVlRCNMAhENT= _, "I'&RG_r, IN"I_GR&TION5. SKILL LEVEL: INTIlOOucroRY, INI'GRMGOIA'r_,
ADVANC_ID6. P11:tO_Ec'Ir' glZ_/COMPLGXITY: _MAJI.L, LARGG'
CO,/_'PONENT. AI-BA'I_Di 8710
I I I
IDATA BASE FILES
EDUCATION AND TRAININO
ORACLE
dBASE III
COURSE
OROANIZATION
CONFERENCE
PRODUCT
PUBLICATION
PERSON
BOOK
<
Q
<(n
(gj..zZ.--w
u-,CO
0I.-<
0I-. 0
i-ra_-. 0 Z
:E 0kl,I
> u_ :Eme"
-- U <ul
_,, < <a. _ Zmm
v <.-: z = ;_-- V 0
_z_ _' = :s _< 8_ ._,-- (/)
-o_ = (v
< wml
m
< w QZ
Z
I-.
I&lM0
Q
"L
s j
o_L
b
.3
q_
.3
_J
r_
<0
Q.Q.<
ZZ0cnw
Q w
o v _ o
o !
x z ;Zo < v wO--
gem
_.Z _ Z v)<-- Z 0 <U
az _z t::; 8-w z w-, a
tO) tu
< _ I.. ,, :£Z w :£ZQ w
,_,Z w vcc 0 w>Z cc u mm<
q;nL • • •
<aZI&l
<
IM"tm0
:SuJ_J
0
lk
Zmm
Zm
I,-
0"0<
IM
IMlk)..
u-0
Z0m
I.-m
Zm
u-IM
=CU<0
8_tk<
ZU
I;:0
I&l,,,IQ.=E
IM
t.J
|
i
ngu_ 2.h
I SOFTWARE ENGINEERING WITH Ada:A DEFINITION OF THE FIELDWITH CURRICULAR OPTIONS
I
J
( ossC.l O. [
2.ACTiViTIES
,m,mmm.
CYCLE
•CONTItOL
MANAGEmAL
SUPI,_RT ACTIVlTIWI
IIII
¢UL1'UIIII
M L 1' A CII A O II OT N O 11 M14 G L i MO U II II UO A S NII G M I
Ii | CII N A
T TII I
ONII
, I i i
3. SOFTWARE ENGINEEI:IING' KNOWLEOGE
I 4 e IIENY_RONME eN_lee HOST| TA_O_rQ IN1W_Gi_41_ON 'I
5. SKUJ. LEVEL. INTRODUCTORY, iNTERMEDIATE, ADVANCED6. PROJECT BiZF.JCOMPLExrrY. SMALL, LARGE
COMPONENT, AI-BASED
SUMMARY
• THE USE OF MODERN SOFTWARE
ENGINEERING AND Ada INVOLVES CRITICAL
TRANSITION STEPS
• THE SEMINAR BRIDGES THE CONCEPTS OF
SOFTWARE ENGINEERING, Ada AND SOFTWARE
SUPPORT ENVIRONMENTS.
• THE SEMINAR PRESENTS ISSUES AND
MANAGEMENT OPTIONS
SofTech
WHO W3ZLBEFIT FBOM T][t_ _M]_AB?ili I
MANAGEMENT PERSONNEL INVOLVED IN THE TRANSITION
PROCESS MAY INCLUDE:
• PROGRAM MANAGERS
• PROJECT MANAGERS
• TECHNICAL TEAM LEADERS
• COMPUTER RESOURCE MANAGERS
• CONTRACT MANAGERS
THE SEMINAR IS DESIGNED FOR THOSE
INVOLVED IN PLANNING OR IMPLEMENTING
A TRANSITION TO SOFTWARE ENGINEERING WITH Ada
SofTech
INTRODUCTION
• THE APPLICATION OF MODERN SOFTWAREENGINEERING PRINCIPLES AND THE Ada LANGUAGEPROMISES HIGHER PRODUCTIVITY AND LOWERLIFE CYCLE COSTS.
• THE TRANSITION TO THESE NEW METHODS,HOWEVER, POSES RISKS.
• A SEMINAR IS BEING DEVELOPED TO ADDRESSTRANSITION ISSUES.
8ei_h
WJ_LT _E8 TWB fgEM]NAB ADDWB88?
• SOFTWARE TRENDS
• SYSTEM AND SOFTWARE £1FE CYCLES
• SOFTWARE ENGINEERING PRINCIPLES AND METHODS
• HOW Ada SUPPORTS SOFTWARE ENGINEERING
SofTech
WH£T IB N]_DED7
MANAGEMENT NEEDS:
• RATIONALE FOR USING MODERN SOFTWARE
DEVELOPMENT METHODS.
• OVERVIEW OF SOFTWARE ENGINEERING METHODS.
• COMPREHENSIVE VIEW OF TRANSITION ISSUES.
SofTech
WHkT 18 NEEDED7
MANAGEMENT NEEDS:
• RATIONALE FOR USING MODERN SOFTWARE
DEVELOPMENT METHODS,
• OVERVIEW OF SOFTWARE ENGINEERING METHODS.
• COMPREHENSIVE VIEW OF TRANSITION ISSUES.
SofTech
_[AT DOg8 T/_ 8BM_AB ADDB88?
• SOFTWARE TRENDS
• SYSTEM AND SOFTWARE LIFE CYCLES
• SOFTWARE ENGINEERING PRINCIPLES AND METHODS
• HOW Ada SUPPORTS SOFTWARE ENGINEERING
SofTech
INTI DUCTION
• THE APPLICATION OF MODERN SOFTWARE
ENGINEERING PRINCIPLES AND THE Ada LANGUAGE
PROMISES HIGHER PRODUCTIVITY AND LOWER
LIFECYCLE COSTS,
• THE TRANSITION TO THESE NEW METHODS,
HOWEVER, POSES RISKS.
• A SEMINAR IS BEING DEVELOPED TO ADDRESS
TRANSITION ISSUES.
8¢dT_
WHO WILL BENEFIT FBOM THIS 8EMINAB?I IIII
MANAGEMENT PERSONNEL INVOLVED IN THE TRANSITION
PROCESS MAY INCLUDE:
• PROGRAM MANAGERS
• PROJECT MANAGERS
• TECHNICAL TEAM LEADERS
• COMPUTER RESOURCE MANAGERS
• CONTRACT MANAGERS
THE SEMINAR IS DESIGNED FOR THOSE
INVOLVED IN PLANNING OE IMPLEMENTING
A TRANSITION TO SOFTWARE ENGINEERING WITH Ada
SofTech
in:)I,-<i,-cn
0LL
:£
ILL
Ziimi
uJm
V)Z0
eo
Od0u_
QLUtn0o.0
ZZ <LU .--I
:£ a.
., r_ ___Z < Z 0 ,.Z.ZZ Z :l: a.
< v L :£I-- tn ,,I
c{_ o.
U
_J
Ui
m
t,.p
t.t.a
0ql.P
I-,
,.,.an<Um
Z-e,(,,,,P!1,,II-,.
Zn
Zn
<
m0,,,,j
anuJ
Z
m
Z0
I,,,J
0
SUMMABY
• THE USE OF MODERN SOFTWARE
ENGINEERING AND Ada INVOLVES CRITICAL
TRANSITION STEPS
• THE SEMINAR BRIDGES THE CONCEPTS OF
SOFTWARE ENGINEERING, Ada AND SOFTWARE
SUPPORT ENVIRONMENTS.
• THE SEMINAR PRESENTS ISSUES AND
MANAGEMENT OPTIONS
SofTech
n_ 3.0e
I SOFTWARE ENGINEERING WITH Ada:A DEFINITION OF THE FIELDWITH CURRICULAR OPTIONS
I
J
m
2.ACTIVITI
IE
1. JOB DESCRIPTION
UFli CYCLE
•CONllqOt.
MANAGERIAL
SUPPORT ACTIVtTI8
I
CUI.1'UR
M b T A OI A O • OT N O. • MH G L I MO U • • UD A • N• G Id I
I | CI N A
T T• I
ON
///
///////
" sorrwAnEJ. O" I:. oINUR,.K.OWLEDamI I
I • J |l
_ 4a ENt_RONM_ e_" |_ HOST| T_G_| IN_G__ 1
S. SKill. LEVEL: INTRODUOTORY, INTERMEDIATE, ADVANCED6. PROJECT 81ZE/COMPLEXITY: SMALL, LARGE
COMPONENT, AI-BASEDi I
2:tJcC0
a.n_<
aZ<
ul tn
I U
u_
I u
u.. I,,,
ZOO"-_..Z
QZ"-- l&l
WZ _ -'
I,,,, w
Z a w mv)IM
wZ m 0>Z a. u
u"lL • •
0
u.nfl,
uJv,,,pn
0
Zm
Z 0 ZI
I
< Z__, < 0
I
w Za _ <
I
_ Z _Z 0 <
oWQZW
O_UW
0:
<
a0 0I- I,-< - 0
< _ I-_ 0 Z
_..z. "_ -_ U
-<
w v '_wm _d N
-- U
< o.
._< Z mOm < <
v_.J
w aZ
cn
<ul<Z
0u__Ju_
k"
uJ
0
ORIGINAL PAC_" ISOF POOR QUALITY
r--,-
C,-
¢ .
CQ_
3
/C
C_
l'
1
t.j
'_)
(]J
_Z
1414I==IIIIlallm_)=Z
,w==
,i
m=¢_lv-(_l
Ol
144
m=ll
144==11m_I-,._i
:E0I==Z
a
m_
==11
0U
I==X144I.=
!i
IDATA [BASLE FILES
EDUCATION AND TRAINING
ORACLE
dBASE III
COURSE
ORGANIZATION
CONFERENCE
PRODUCT
PUBLICATION
PERSON
BOOK
.. °.,
..., •
f q;OIB_A'R; ;'NGINI;';'RING WITI.I, AOA 1
A 'DEFINITION OF TI4E' FIELDWITH CURRICULAR OPTIONS
II. JOB D_'c3cRIPTIONI
2.
A(3TI'v'ITI-E"G
CONTROL
//,A///////
$ M L T A CE E A O $ O
T N O $ MC H G L E MU O U _.S. S. UL D A $ NT S G M IU E E CR S N AE T T
= I0N$
13. S_ARE' ENGINEERING KNOVVI.E"OGE 1
I 4. ENVmON_=N'r,,o_r.'rAnc,_. li,n'_GnA'nONS.
ADVANCt;O . /
, COA__N*r. AI-aAS_ J 87'0
# l J J
f
TWO SCENARIOS FOR
55P EnUlROnmEnT
In _ooo+ R.O.
HOSTEI'IUIROnmERTS:
• OEUELOP
• 5USTRIn
1
inTEGRRTIOnENUIROnmEnT:
• CONTROL OFTGT. EnUIR.
BRSELlnE
• InTEGRRTiORU_U FOR nEXTBRSELInE Rno
TEST 6'IRTEGRRTIOn
PLRnS
TRRI3ETEnUlR0nmEnTS:
• OEPLOV
• OPERRTE
,m
p
d
_'ZGUt_. 1-5 _E S0_,I,,_L_ ENVTRONI'_N'TS
4 "°
o_O_.
>_
%..
(i)
c-olo9
ooc-
>,
0
0iI
c--
(DC
0
oO
C'd"0C
00
C
or)
"-!
00IN
0T(1)
ii
0
0
I--
"00(..)
.E:
t-
O
0
E
'-- 4_
C
oi --i
C
C0O.
E0
0
0
0
E
0u
0
u_0
..0om
O0
0...,,.-.00 _
•-- 0 "1_
g
0 _-'.0o._.9, c
"0 c" _
em
1"-
c"
m
0_E•*"_ (D
fill'-
0-_eN
0
>t-OO
O_<DO
Ot-
e_
""_ -t:::
O'-c"O0 4--
_"0oN
O_
r-o
"5o
m E
0cO
.i-.a
comm
COc-O0
COCO
..C!--
CD..Q
0
00(D0
0oO
"ID
<1) 0
,_.. c_Oc"
"_0c-:+_CDC_E._o
c-_CD
E_I-00-_-"'+- "t30O( D.-_"t_.0_"_-_oCL.o.
_0
m_
0oim
0c_
c'-
<I)
.o0
c"
0
¢.0
m
"O
C
E
c"
t-O
e_
c"
X
c"
¢.elc-O
o_
0
"00
E0
m
M-,,-0
C0
m _
_ >
0
E
CC
0
m
U u
¢'1
_"Fea ture
Status
Validation Suite
Basis
Representation
InformationManagement
Kernel
Security
CooperatingEnvironments
Location
Processor
TypesCommon ExternalData Format
CommunicationsImplementation
Distribution
Unique Names
Transaction
ManagementData Access
Stable Storage
Granularity ofRepresentation
Interoperablilty
Goals
_Support for
Multiprocessors
Support fornonlunctlonalrequirements
Environments
I/0
PCEE
Definition Stage
Required
ARTEWG CIFO andClear Lake Model
CAIS
MIL-STD
in Progress
unique
CAIS-A
In Progress
In Progress
C_S
PCTE
Completed
Completed(based on XPC1
UNiX SVlD
Object Node Node Object
Extens_le ENRA unique ENRA unique EA/RA unique F..NRA(based on IRDS)
"bare machine',
operating system
"bare machine",
operating systemoperating
system
"bare machine',
operating system
Full TCS "Puce Book" minimal
required not supported
TCS 133class MLS minimal
supported LAN only
Migratable Fixed Migratable tAN migratable
Heterogeneous I-bmogeneous Heterogeneous Homogeneous
required not supported some support minimal support
Full OSI NA TBD Four layers of OSI
FLANsof single site Some RAN arx:l LAN
Integrated LANs I.AN support
Objects, Processes,Transactions,Relationships,and Attributes
Nodes,
Relationships,and Attidoutes
Single LevelDistributed Nested
ll_des t
Relationships,and Altributes
HA
Synchronized NA : NA
required NA NA
Each thread of control program programfor each program
data, tools, control data data
_ortablllty, performance portab=lity, portability,stable baseline & safety performance performanceacross all envlronments
required NA NA
NA NAARTEWG CIFO and
Clear Lake Model
Host
character-orientedterminals
Host
graphics andwindows
for a PCEE
Host.Targetand Integration
graphics, windowsand other devices
Figure 3-1 Comparison of Features50
Objects,Relationships,and Attributes
DistributedNested
Synchronized
NA
program
data
portability,
performance,stable base
NA
NA o
Host
(some Target)
graphics andwindows _,
Ad___aaProgramming Support Environment (MAPSE) to Support th_
Life Cycle of Large, Complex, Non-Stop, Distributed Systems,SERC, July 1986.
Military Standard Common APSE Interface Set (CAIS), MIL-STD-1838. 31 January 1985.
Space Station Software Support Environment Functiona]
Requirements Specification, National Aeronautics and Space
Administration, Johnson Space Center, JSC 30500, Draft 3.0,(6 April 1987).
Notkin, D. et. al. Heterogeneous Computing Environments: Reporton the ACM SIGOPS Workshop on Accommodatinq Heterogeneity.
PCTE A Basis for a Portable Co,_non Tool Environment, ProjectReport, ESPRIT Technical Week 86.
PCTE A Basis for a Portable Co,_non Tool Environment Ada
Functional Specification, First Edition, Volume I.
Rogers, P. and C. McKay. "Distributed Program Entities in Ada",
Proceedings of the First _nternational Conference on Ada
Programming Language, 2-5 June 1986, p B.3.4.1.
Rogers, K. "Extending the Granularity of Representation and
Control for CAIS Process Nodes", Proceedings of the First
International Conference on Ada Programming Language, 2-5June 1986, p D.2.3.1.
Thall, R. and S. LeGrand. "The CAIS 2 Project", Proceedings of
the First International Conference on Ada Programming
Language Applications for the Space Station Program, 2-5
June 1986,
p D.2.6.1.
Bibliography
ACM SIGAda Ada RunTime Environment Working Group (ARTEWG), A
Catalog of Interface Features and Options for the Ad_
Runtime Environment, ARTEWG Interfaces Subgroup3, Release 2,23 July 1986.
Auty, David, Ada and Operating Systems Practice and Experience inTargeting Ada, presentation to NASA/JSC, April 1986.
CAIS Panel Discussion, First International Conference on Ada
Programming Language, 2-5 June 1986, Session D.5.1.
Chen, C. "Conceptual Architecture for an
Environment", Rockwell SSSD IR&D Progress
(fall 1987).
Ada Run-Time
Report 86567,
Dolk, R.D. and R. A. Krisch II. "A Relational Information
Resource Dictionary System", Communications of the ACM, Vol.
30, No.1 (January 1987).
Fisher, Herman, PCTE Overview and CAIS Comparison Impressions,9 September 1985.
Fisher, Herman, PCTE Ada Conceptual Design (PCD), Mark V Business
Systems, Draft of 22 November 1986.
KAPSE Interface Team (KIT), DoD Requirements and Design Criteria
for the Common APSE Interface Set (CAIS), 13 September 1985.
KIT Meeting, presentation by CAIS-A contractor, April 1987.
Mark V Business Systems/Systems Designers PLC., PCTE Ada
Interface Requirements, Version i.I, 27 December 1986.
McKay, C. "Distributed Computer Systems and Software Safety",
SERC Lecture Notes, April-June 1987.
McKay, C. A Proposed Framework for the Tools and Rules to
Support the Life Cycle of the Space Station Program, COMPASS'87 Conference Proceedings, IEEE, June 1987.
McKay, C. Life Cycle SuDport For "Computer Systems and Software
Safety" in the Target And Integration Environments of the
Space Station Program, SE_C Memo, 15 June 1987.
McKay, C. "CWM's Perspective of:• Probable enhancements to transition CAIS to CAIS-A
• Potential implications for 3 environments of the
Space Station Program (host, target, integration)", SERC
Memo, May 5, 1987.
McKay, C., R. Charette, D. Auty Final Report on: A Study to
Identify Tools Needed to Extend the Minimal Toolset of the
0_ ©
I :
%i
0
, ©
©
t"
e_
,.--4 e1_
_I 0,--I .,_
rd o,,..,'.
ORIGINAL PAGE IS-OF POOR (_ALITY
d
0
0
m
0
D
_m
Dum
im
ul
mm
om
m
ID.,,x
nnn
0Z
0 I
<.__.__wE0
i
!--
I oIZII
"_ ,,,,,.,j
I-- I---
j,III,
..@............@...,
_E
im
-_1CD
Cl.) .,i--
_.. il)O O,..,,_h
, 0 "-l_i I.-...0
/
11
i-.-¢..e..
X
_. \ ¢_%
%
% %
I--..I
e_lL__
-r.
f--
TWO .sCEnARIO_5 FOR
5_5P ERUIRORmERT
In _ooo+ A.D.
X 0
X X _ 0 0X . X _ 0
x ® x x_ o o
• "-<_&HOST
ERUIRORmEnT5:
• OEUELOP
• 5LISTAIR
InTEGRATIOn.EnUIRORIT1EnT:
• CONTROL OFTOT. ERUIR.
BASELINE
• IFITEGFIATIOnU_U FOA nEXTBASELINEAnn
TEST G'InTEGRATIOn
PLANS
TARGETERUIROnmERTE:
• nEPLOY
• OPERATE
.,-4
m,"
O_
1,""
,.--i.m.i
1,.-.-4
0
,..,,,,I
c_
.r-!
¢.,
llmlII
,-.,-I
,,ll_
0
0
.,-I
.,.-t
h_
0
(D.m.l
0.m.t
0
0
MATHEMATICAL AND
STATISTICAL ANALYSIS
Conveners: Cecil R. Hallum, UH-Clear Lake
David K. Geller, Mission Planning and
Analysis Division, NASA/JSC
Space Station Momentum Management and Attitude Control
Bong Wie, University of Texas at Austin
Quantifying Software Reliability (Invited Presentation)
Patrick L. Odell, University of Texas at Dallas
Summary of theMathematical and Statistical Analysis
Technical Session
David Geller
and
Cecil Hallum
PRECEDING PAGE BLANK NOT FILMED
MATHEMATICAL AND STATISTICAL
ANALYSIS
COM PONENT CHARTER
SUMMARY OF PRIORITY SUPPOIkq" AREAS
CURRENT ACTIVITIES/STATUS
t_ov 03 15:04 1987 sym87 Page 1
R[CIS SYMPOSIUM 87'
k_thematic:_l and Statistical Analyses
Space Station Attitude Control and Momentum ManagementPresented by Dr. Bong Wie
_' ":._m a I'V
The space station momentum management project is being monitored by theMPAD Guidance and Navigation Branch. The primary investigator,Dr. Bong Wie of the University of Texas at Austin, presented apreliminary design for station atttiude control and momentum managmenz.
First. Dr. Wie reviewed the space station Phase 1 configuration anddescribed a station CMG (control momentum gyro). He then explained howthe CMG's control the attitude of the station and why CMG momentummanagement is needed.
Next, a controller for the space station pitch axis was introduced.It was shown that the cyclic aerodynamic torques acting on the stationproduced large undesirable pitch oscillations. However, when a periodicdisturbance rejection filter (tuned to the aerodynamic torque frequency)was added to the controller, the pitch oscillations were be completelyeliminated. In addition, pitch CMG momentum was shown to be minimized.
Following this, the space station yaw/roll controller was introduced
In this case the aerodynamic torques acting about the station's yaw/rollaxis produced large yaw/roll oscillations. When the disturbance rejectionfilter was added to the controller, it was found that only yawoscillations could be eliminated. Roll oscillations were minimized, butnot eliminated.
Dr. Wie also made some comments related to space station flight software.The control laws that would be implemented in the flight software werepointed out, and the required state integrators were noted. It wasalso shown that the computer storage requirement for gain schedulingcould be minimized using a proposed decoupled feedback controller.
It was noted that Dr. Wie and the University of Texas have been
extremely productive and have been providing excellent results.
ORIGINAL PAGE IS
OF POOR QUALrrY
PRECEDING PAGE BLANK NOT FILMED
MATHEMATICAL AND STATISTICAL
ANALYSIS
(PROPOSEI)) PRIORITY SUPPORT AREAS
R.ELIABILITY ASSESSMENT OF SOFTWARE, FAULT-
TOI,ERANT COMPUTERS, AND COMPUTER NETWOI{KS
Background
Much research has been largely probabilistic in nat.re
Much has been undertaken by the Engineering community
Numerous publications in Engineering literature
Interface between Computer Science and Statistics
Statistical comnmnity has largely focused on the
aspect of application
?-5t_istical emplr_;_-a'_ifting now to inwstigation_..
SOFTWARE RELIABILITy:" STATISTICIANS ARE
WELL-QUALIFIED TO;'AD. DRESS:
. - .:;.._,. . _,, , _. . _-, , :, . • *_... _;_,..
_QUanti6cation and measurement of software reliability
• Assessment of changes in software reliability over
Analysis of software-failure data
Decision logic for whether to continue or stopt. •
testing software
2
MATHEMATICAL AND STATISTICAL
ANALYSIS
I{I,;I,IAIIII,I'I'Y OF FAULT-TOI,ERANT COMPUTERS AND
SOFTWARE
Complex system involving automatic detection,
diagnosis, and correction of errors (faults)
Large research gap
Existing material mostly qualitative
Potential for valuable contributions from
Statistical community here
NETWORK RELIABILITY METHODS - CONSIDERABLE
RESEARCII EMPHASIS TO-DATE
OTIIER CRITICALLY RELEVANT EXPERTISE AREAS INCLUDE:
Math Modeling of Physical Systems
Simulation
Statistical Data Reduction
3(3_,,_,_NR,L PAGE ISC'F ?OOr QtlALITY
MATHEMATICAL AND STATISTICAL
ANALYSIS
Evaluation Methods
Robustness (Stability)
Sensitivity Analysis
Perturbation Theory
Error Analysis
Development of Test Criteria
Optimization
Optimal Experimental Designs
Algorithm Dovelc_pment
Math Methods in Signal Processing
Consultant and Team Member
4
CUItltENT ACTIVITIES/STATUS
SPACE STATION MOMENTUM MANAGEMENT AND ATTITUDE
CONTROL
Bong Wie, J. Speyer, and D. Itull
Guidance and Control Group
Dept. of Aerospace Engineering and Engineering Mec
UT/Austin
QUANTIFYING SOFTWARE RELIABILITY
Professor Patrick L. Odell
Department of Mathematics
UT/Dallas
5
()IN o IJA N'I'IFYING SOFTWARE RELIABILITY
l%trick L. Odcll
Uiliv,'.vsity of Texas at Dallas
October 1987
1_ I,,ILS 1' I';C_l'l V ES
l,)fe Czcle.
(l) l{x.quiremcitt, l)efinit, ion Cycle
('2) 1)esign Cycle
(3)C,,,nstru,Cion Cycle (Includes VVT)
(4)Ol_eration and Maintenance Cycle
'.l'l_e Actors and Advocates.
( 1) Managers
(2)Coders and Computer Scientists
(3)System Engineers
(4) Reliability Engineers
A Little Culture.
1_, valuation and Development
1,; valuation Separate from Development
1-1. cliability Report submitted to manager and then manager makes decision
M anagers rand Producers are not part of final evaluation team
Q uality Assurance versus Manufacturing
ORIG;NAL PAGE IS
OF POOR QUALITY
QI.j A N'I'I I"YI N( ;"
SOF'I'WAIKI!; I4]';I,IAI_II,I'I'Y
A I)ROGRAM. P(x): X -_ )z ])(.z) '/'(z)
T(x)
x Y
Y
Input Space Output Space
The Literature.
HARDWARE RELIABILITY:
1. Shooman M.L., "Probabilistic Reliability: An Engineering Approach,"
1968.
2. Martz H.F. and Waller, R..A., "Bayesian Reliability Analysis," 1982.
SOFTWARE RELIABILITY :
3. Musa, J.D., Iannino, A., and Okumoto, K., "Software Reliability; Mea-
surement, Prediction, Appplication," 1987.
4. Miller E. and Howden, E.H., "Tutorial: Software Testing ,_nd Vali(l_t-
tion Techniques," 1981.
5. ACM Computing Surveys 14, No. z (lvs2).ORIG|NAL PAGE rSOF POOR QUALR'Y
QUANTIFYING
s O I;'T WA I-(E I{ELIABILITY
II AI,STI,;I)'5 M I,;TIi()i). 'l'otal number of bits required to specify the pro-
Ifr;url
v = (N, + N_)log_(_,+ _)
Numb_'r of "Mental l,apse"
N= v/E
E denotes mean number of mental discriminations between lapse.
CAP'I'UI{E-RECAPTURE METHOD.
(1) t_I - Ns _ Duran/Duran WiorkowskiTI. 6
T'rL I"_
(2)N-- k l_udner
MEAN TIME TO FAILURE (MTTF).
(l)Errors = M(1 - exp(-Ct/MT)) where M denotes Total No. of Errors, T
denotcs MTTF at .*tart of tesC.
(2)R = exp(-t/MTTF) denotes reliability- Musa, Iannino, and Okumoto.
4
QUANTIFYINGSOFTWARE RELIABILITY
DIRECT METHOD.
R __
No. of successful runs
Total No. of runs
FUNCTIONAL TESTING (Alternative)
P(x)
Pm(x)////p(x_ ) +Pe(x)
Pro(x) - mutation
5
III';SI,;AI((:I! AREAS
I¢c1"..
(l)Softwar{. 'l'est, ing V;didation Section 7
(2)Validation, Verification and Testing of Computer Software (NSF), Vol.
No. 2, A(;M Computing Surveys.
].'|,
(3)Cllapter 7,; Musa, lannino, and Okumato
/_ FO:IS.
(1)Theoretical Foundations for a) Testing b) gvaluatiing Software, and c) Eval-
u,,;i '" 7 "'_,_-,'_'x,,e: _ Systems. - - -
(2)Develop "Pert Chart like" software development system to monitor and/or
guide software development.
(3)Make precise tile notion of "how valid software should be7."
(4)A method for packaging validation tools.
(5)Study interaction effects between software and hardware in order to esti-
mate system reliability.
(6) l)evelop methods for "tearing" a program apart to facilitate functional test-
ing.
6
ORIGINAL PAGE iSOF PO0_ QUALn'Y
XJ
PA(X)
Input Space Output Space
PA(X) -----T(x) for all x _ X
I! PA(X)"=Ttx7 i"i _< E(x) for all x 6 X
XNC
Xc
XB
P(x)
Y
Y
XB, Xc, XNC
INFORMATION MANAGEMENT
Conveners" Peter C. Bishop, UH-Clear Lake
William J. Huffstetler, Assistant
Engineering, NASA/JSC
to the Director,
The Need for Strategic Information at JSCWilliam J. Huffstetler, NASA/JSC
Research Projects in Information ManagementPeter C. Bishop, UH-Clear Lake
Database Strategies and PrototypesTimothy N. Tulloch, Vice President, TNT Consulting
Space Station Documentation Technology and StrategiesChristopher Dede, Professor of Education, UH-Clear Lake
Future Research OpportunitiesLloyd R. Erickson, Electronics Engineer, NASA/JSC
INFORMATION MANAGEMENTPresenlations
Peter C. Bishop, PhD
Associate Professor, Ituman Sciences
Director, Space Business Information Center
University of Houston-Clear Lake
Information management is the RICIS research area devoted to the final customer of comput-
ir_g and information systems--the end-user. They are the people at the end of the long chain of
i,fommtion systems who don't care how their information is collected, manipulated, or stored as
hmg as the right iufommtion is in their hands at the right time.
Information productivity, therefore, is the overall objective of the information management
research z|rca, hi other words, people who use information systems should realize more value by
usiag the system than by not using it. NASA in general and the Johnson Space Center is particular
have a tremendous need to understand what makes an information system productive and to develop
Iwoductivc systems for its employees, contractors and customers.
Our first speaker in this session will address this issue directly. He is William Heffstetler,
Assistant to the Director of Engineering at the Johnson Space Center. Mr. Huffstetler has served in a
mm_I:cr of different capacities during his time in government services. Most recently, he was chief
of the JSC Office of Flight Projects Engineering, a JSC organization group which helps academic
and industrial customers develop payloads for the Space Shuttle. In that capacity, Mr. Huffstetler
served on the NASA Commercialization Task Force which wrote the NASA Policy on Space Com-
mercialization. I have asked Mr. Huffstetler to comment on how information systems can enhance
productivity at JSC.
I will take floor following Mr. Huffstetler's remarks and describe the main projects within the
RICIS information management area. One project I am personally involved in is the Space Market
Mtx.lel Development Project. This project, conceived almost three years ago, is designed to study
the information needs of the business community in their search for and evaluation of space ven-
tures. That project has resulted in a prototype information center at the University, entitled the
Space Business Information Center, which is collecting and distributing space information to mem-
bers of the space industry. I will describe the results of the first phase of research activity.
Another objective of the Space Market Model Project is to develop and evaluate electronic
tools for the collection and dissemination of information. Our work is focused on using the NO'-
MAD2 database management system. Mr. Timothy Tulloch, Vice-President of TNT Consulting, is a
support contractor on this aspect of the Space Market Model. He will describe the principles of
infommtion management that we are trying embed in a tool which we have developed.
ORIGINAL PAGE IS
OF POOR OUALITY
The management of textual data has received less attention than themanagement of numeric
data because the technology to handle large amounts of text did not exist. Dr. Chris Dede will
describe how that situation is changing, however. He will report the results of long-term forcca_ting
project he directed. The project was designed to assess the state of the art and the state of the prac-
tice in the area of electronic documentation in support of the Space Station software development
and management.
Finally, Mr. Lloyd Erickson from JSC/MPAD will describe a new project we are just begin-
ning. JSC has made great strides in hardware connectivity over the last few years. Individuals can
now get access to most mainframe and many of the minicomputers under JSC control. The data
which resides on [hose computers, however, is still largely out of reach through lack of a suitable
interface. The Management Information and Decision Support Environment task is designed to
prototype interface strategies so that JSC managers and technical staff can use one tool to access a
variety of JSC databases.
The sessions this afternoon then contain a blend of the old and the new. Beginning with the
need for productive information management, expressed by Mr. Huffstetler, we will get report
results of rcseaz_h projects currently underway was well as the objectives of research projects which
are only now beginning. True information productivity is a tremendous goal which will require a
long-term to achieve. Fortunately, we have begun.
l...twPu.n.n"5
0
_U
u.n.n
_- ..C
0 "
lal e__ "o
_o_
(D _-_ w--a -,-4
• 0 0 O • • • • J_.o • • .p.q • • • •
_" • ee •
ImmUELm
0IMa.
I-ZmAN
U_
0 o ,,.,.¢ -PC
0U'JELI
ImLLm
ag
mmmmm_F,
U
a.
U
(Dr_
.,,.¢
p_
O0
om,=¢
_sPQ '_ F.T,I C_o
I--UuJ==b
0n_
i,=,ZUJl
,_o=-_
ao _
UI,,,,
<
U<n_
W
k
:" r_
(.-1- 02: -,
Z
=_o
Z¢,,-3m
z
0_J
=)ZwOO_-
>-=EI,,= =¢":0m
=gu_<Z
m
• _
_,ao m
_ _ 00 _ _ Z(=) l,.=m, l,--Jo
,.-,. _
m
m
WC
m
CInI
BI
_ZUQ
ID,
m==1
=,Im
a _ ;" = Z0 o C
ca _ _ n nco.
o _ Co _ _q
m
Research Institutefor
Computing and Information Systems
_ :: : i::.:::..,+_.:..:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::_ _- ..
Dr. Peter C. Bishop
Studies of the Future
University of Houston-Clear Lake
SURVEYS
What is out there?
Environmental Scanning for
Information Processing
Clear Lake Area Computer
Capability Census
o-
DEMONSTRATIONS
Space Shuttle Payload Information
System (SS PIS)
Space Market Model Development
Project (SMMDP)
FY88 Researoh Projeot_ .
• PLANS
-* Long-Range Plan for the Commercial
Development of the Space Station
-* Methodologies for Integrated Information
Management Systems
Integrated Parametric Planning Models for
Budgeting and Managing Complex
Development Projects
FY88 Researoh Projeot_
DEMONSTRATIONS
-o Management Information and
Decision Support Environment (MIDSE)
=* Image Management and Access
(Project ICON)
.°
DATABASE STRATEGIES AND PROTOTYPES
Timothy N. TullochVice-President
TNT Consulting
PURPOSE:
io Describe the principles utilized to develop
productivity tools.
o Illustrate the use of a tool which utilizes these
principles.
Definition of a Productive
Tool
i ,
2.
3.
4.
5.
6.
7.
8.
Independent of Application
Enhances User's Capability
Operates Intuitively
Flexible Entry Techniques
Keeps Track of Detail
Remembers History
Modifiable Parameters
Access to Related tools
u_
oji
-qbn_
o_
_J
oml
J_
rj_
_D
m
om
_m
_u
om
oml
ojml
L_oN
J_
c_
omml
om
c_
rj_
c_
_u
oJ_
oil
J_
om
_N
om
m
m
oJU
9_
o_
oil
J__N
olml
c_ C_oi
c_mmmm
Im
m
am
c_C_
EolnmI
0.
AuJV't
I-.ZLL,
Z0n_
ZELI
I-.-ne0a..a._D
Z0m
1
UIllaZ01
I.-
0ELZI
I.-ZEL,
L_
Z
L,J..J
0
Q.
iI
0
L,JI.-
I--
Q
"1-U
0,Ya.o,.
_DI-
LL
_o
0
oL_
o
Q.
0
0
a.
oz_
U
z_o _
_ _ _ _ o
_ _ _ _ o
z _ _ z
o o _
u a _tlu _
a u.
Z _ U 00 _ _ Z
• • • •
!
0
[u
Lu"1-
0
aZ
L_LU
c_ 0
z
_- _" Z Zi
uJ Z 0z _ 0 _
u 0 _ -rLU I"" U_Z _: I-- _ L_-- _ Z 0 _ Z
-- 0 uu X
I,,,,,-Z1.1.1
O
i
ZI.l.,J
Z01
I--co
,,>"
trio
Z
U
.-,I
1
0
tto
I,.ltJ
d
0
_o
A
,,,
U
_t'J _,S"I _P'I U,/'l
%'%
%%
%
\%
\\
%\
a
":[J U" U "_',_[l_ U L,J
_[I ___j .--I _I_I_ U _-LU I•,-,, • • •
ARTIFICIAL INTELLIGENCE
AND EXPERT SYSTEMS
Conveners: Terry Feagin, UH-Clear Lake
Timothy F. Cieghorn, Mission Planning and
Analysis Division, NASA/JSC
Introduction and Overview
Timothy F. Cleghorn
Communication and Tracking Expert Systems for the NASA
Space StationT.F. Leibfried, UH-Clear Lake
Simulation of Robotic Space SystemsYashvant Jani, LinCom Corporation
Robotic Path Planning and Software Testbed ArchitectureRichard D. Volz, University of Michigan
Fuzzy Set and Related Theory for Failure Detection and
Control in Space SystemsThomas B. Sheridan, Massachusetts Institute of Technology
A Computer Graphics Testbed to Simulate and Test Vision
Systems for Space ApplicationsJohn B. Cheatham, Jr., Rice University
Demonstration of a 3D Vision Algorithm for Space
ApplicationsRui J.P. deFigueiredo, Rice University
Summary of the
Artificial Intelligence and Expert SystemsTechnical Session
Dr. Terry Feagin introduced the technical session by identifying the various research projects
underway in the technical area. Dr. Timothy Cleghorn gave an overview of the projects in this
technical area that are funded by the Mission Manning and Analysis Division. All of the projects
except the work on the communications and tracking expert system fall in this category. These
projects are ultimately directed at the formation of a Robotics Software Simulation Testbed withinMPAD at JSC.
The work in expert systems for communications and tracking was presented by Dr. T.F.
l.cibfried, who described how the team of three faculty and four students were studying various
ways of approaching the problems of detecting, isolating and recovering from faults in the communi-
cations and tracking systems to be used on the space station. He described that as software in the
area is developed, a software simulator must be employed to exercise and test the system. Two
systems for fault detection and diagnosis (as designed by Harris and TRW) are being reviewed
closely for ideas about the best way to approach this problem. Both of these systems are based upon
using expert systems for the diagnostic portion of the system, as various alternative possible causes
for the observed problems are evaluated. The expert systems are written in ART (an expert system
shcll language) and run on the Symbolics LISP machine. The TRW system runs on several ma-
chines and much of the code is written in the language C. Other work under this project involves the
development of an explanation facility for the expert systems, a distributed collection of cooperating
expert systems, and extremely fast fault diagnosis for single point failures using bit-strings.
The work on robotic path planning at the University of Michigan was described by Dr. Kang
Shin. tie explained how one can evaluate the various possible routes that a robot might take through
a set of obstacles in order to reach a desired destination. He also explained how one could take into
account a measure of safety as the various obstacles were circumvented, so as to avoid collisions due
to small deviations in the path due to an inability to control the robot's movements precisely. Also,
hc showed how blind alleys and unacceptable paths could be labeled recursively until acceptable
paths were identified for further evaluation so as to determine the optimal path for the robot to
follow. He also discussed the generalization of the approach to three dimensional problems.
The work on fuzzy sets for failure detection and control was presented by Dr. Thomas B.
Sheridan. He described how fuzzy sets could be used to model uncertainty and how this approach
could be used effectively in failure detection and control. He described how objective measures of
uncertainty could be obtained.
The work on a graphics testbed for computer vision systems was described by Dr. John
Cheatham of Rice University. He described how they are developing a graphics systerq for simula-
tion scenes that might require analysis by a robotic computer vision system. The system is presently
11.
able to simulate the appearance of an artificial satellite under various lighting conditions.
The work on 3-D vision algorithms for computer vision was described by Dr. Rui de-
Figueiredo of Rice University. The algorithms being developed allow selected objects viewed by
the robotic computer vision system to be recognized readily. Various invariant properties of the
objects are used to aid in the identification process.
Dr. Yashvant Jani described the work on simulation of robotic space systems presently being
conducted at LinCom Corporation. The research involves applying expert systems to support Du-
board navigation (ONAV) ground controllers in operational training associated with monitoring the
status of navigation sensors during the entry phase of shuttle flights.
t
I
iQb
£ I ,,
/ 'i 'Ibc_
8
co
0
_o _ _
o o D
" "3
LM
U_
F"
rr"<_
or-
-r"
• °
I'"
1,._
L__
ORIGINAL PAGE IS
OF POOR QUALITY'
AI-I Expert Systems Study for T&C
Supervisor Oron Schmidt EE7
UIICL Team Members :
Faculty
T. F. Leibfried
T. FeaginJ. Giarratano
Students
David Overland
Dennis Stevens
Gary Young
Albert Ro_riguez
Objectives
Contractor Studies
Harris Corp. (Mlb. Fla.)
TRW (Redondo Beach Cal.)
Lessons Learned
Future
,b
-. _,I_AL PAGE ISOF POoR QUALITY
Executive SummaryRICIS Research Activity AI.1
Expert Systems for Space Station T&C17 June 1987
Section 1:
Objective: Study Xethodologies and Techniques for Optimal Developmentof Configuration _anagenent, fault Detection Isolation
and Recovery and Explanation Expert Systems
Overview : The space station environment will require malfunctiondetection, isolation and recovery from all causes.Station personnel will probably not be proficient incouunication systems analysis and management. There
will be a need for on-board expert systems to provideassistance to the crewmen. These systems will have to bedistributed in nature because of the nature of the
hardware design. The techniques and principles of goodexpert systems software design need to be researched
so as to provide workable implementation guidelines
for production system contractors.
Status: Preliminary analysis shows that aodularization andand using a mixture of so-called Expert SystemLanguages and more conventional procedural languagesis feasible. Reusable expert systems code and thefeasibility of automated knowledge acquisition are inthe early stages of investigation.
Section 2
Technical Issues:
1. Shculd--_'_"_velopaent environment for ZS be different
than the Implementation environment ? (The answerso far is "probably'.)
2. What can be done to make expert system languagesoftware more maintainable and efficient ?
ORIG;P,TALPAGE IS
OF POOR QUALITY
+
U
r
!
oZ
>_, . ",..
,IIIIq _lA
'=-_ o . .-MJ_ -- I I-I,
" "s--;+,:,..,=+0+_i----_: _ g V|.-
oo
Of: POOR Q_J,_iTY
t _"" ..........
,,..° .... ...
°
0
w
B-°-......
,q_
w0
G2I
t_
_J
0
Q
I
,,:, _1 _
--o C
G
i
I '- ' _ .-"- n _
I o i
ORIGINAL PAGE IS
oF POOR QUAU'rY
Lessons Learned
Simulators
Function
In support of FDIR
Test and Explanation
Implementation Environment
FDIR
Function
In support of Resource Management
Isolation and Explanation
Development Environment
Implementation Environment
Low level Detection and Isolation
Higher level Reasoning
Future Investigation
Generic Simulators (Table driven)
ANS for Modeling.__ ____
MMI Needs
Expert System Implementations
Rule-Based
Procedural
Rule-Based Conversion to Procedural _
Automated Knowledge Acquisition
f- ROBOTIC SPACE SIMULATION
SIMULATION OF ROBOTIC SPACE OPERATIONS
INTEGRATION OF VISION ALGORITHMS INTO ANORBITAL OPERATIONS SIMULATION
YASHVANT JANI, PhD
WILLIAM L. OTHON
LinCom CORPORATION
RICIS Symposium
15 October I g87
LinCom---_
•-- ROBOTIC SPACE SIMULATION -_
AGENDA
• OBJECTIVES
• USE OF SIMULATION
• INTEGRATION OF ROBOTICS / VISION ALGORITHMS
INTO AN ORBITAL OPERATIONS SIMULATION
• CURRENT EFFORT: INTEGRATION OF VISION
ALGORITHMS FROM RICE UNIVERSITY WITH
ORBITAL MANUVERING VEHICLE (OMV) MODEL
• PROJECT STATUS
• FUTURE EFFORT
..... LinCom ----
--- ROBOTIC SPACE SIMULATION
OBJECTIVES
DEVELOP A TESTBED FOR INTEGRATION OF
ROBOTICS SUBSYSTEMS AND SPACE VEHICLES
SIMULATION
se IMPLEMENT VISION/ROBOTICS ALGORITMS
• • PERFORM SYSTEMS INTEGRATION ANALYSIS
• STUDY OPERATIONAL ASPECTS OF ROBOTIC
SPACE SYSTEMS AND MISSIONS
, LinCom__-
U
I,M
I,---
<e_
0
U
a
0e_
z0
< -
2
x,=E
:t
4
_ I ---_ •l!
t:3
II
__ -_"_ __
_.," \ / "-_ _:
_ -4-
d
ZoV_I
>
,,_Z<
QZ<
oZ
ZZ<
g_Z
o
II I
Z0I
l-
eeW
0I--0
-0e_
-rI---J
0
l--Z0
0k-
ee
UI..MI.Mee-rF-1.1.
0I..M
E3
• • Q • •
J
Z0
>
)-
Z
n7
07
7Z
:70
.)'3"3
U
3
.?JLJ
3
i._
i
II
Ii
sl_row
u1
'III!I
e
ORIGINAL PAGE f$OF POOR QUALITY
Z0
>-,.J
Z
Z
0Z
ZZ
Oh.
o
¢J
z
¢1o
w
Equipment
Fine guidancecontrol _,mors (3)
AFT
High gain antenna
Secondarymirror.
Primary mirror
AperTure door
Scientificinstruments
Axial modules (4)
Radial modules (1)
Fixed heed startrackers (3)
bla roll out array
ST ,t.nt:enna PoCnC£ns System
('ontrol]er
r "I
_f!
L J
r
+
L .....
Base Vibration& ]Temperature
Motor & RWA ]I
A*S+B C*S+D
o_s! Bod$Dynamics
I
L_
,Fine Guidance SensorI
.................. J
IIoise
;_ !
I
!
!
I
L-
noise r
I
x,4- t• . |
)I!
L .....
noise
-I
S*S + Ar*S + Br Rate Gyro Assembly
J
"1!
1 ; l '
S*S+Ap*S +Bp r '
Space Telescope Attitude Control Simulation
I
I
I
1
I
I
I
I-=
r" ....
A I-m--
1
r"
I
I
I
I
I
I
J
I
!
/
1
I
I
I
J
"- _pace Telescope
-- Components;
-Simulators
Corn par ato rs
All Variables are measureable.
' 11
ft=A
i!
!
I
I
I
I
J
.... 1
I
!
I
I
I
_1
Space Telescope
Components
Simulator::
Corn par:ttor:;
Variable p is not measureable.
-1-
I"
I
I
L--
rm
r- ........
A
C
m_d
J Al-9 Fir, xmj
II
I
_J
Zm
Model
J
Inadquate Measurements
0.5- Cut
!
{F}= { 0.I/I, 0.3/2,10.7/3,0.9/4, 1.0/5}
{F} = {0/1, 0/2, 1/3, 1/4, 1/5}
CHspCategories
Very
High
High
Medium
Low
Very
Low
Fuzzification of Discrypancy
for Given Time Period
| I ! ! ! | ! " I ! '_ " ! ! !
I I I I I I I I I .I I _f II i
I I I I I I I I I I I I ', , , , , , ,I , I I t I I |/_.,IIVV't''" 'w "'vyv I,/_IIV_V ¥"
---.--.--.---,---.--.--.-.--.--.- _ f- -_'r" _-"T - - -
' ' ' ' ' 'h 'if'' ' ' ' ' 't i _ , I xk¥11L i _" I s _ i i i, , , * i .iVY _NIJl ' , I , , iI I I | Lilt" I "" _I/IB I I I I I I
--T--1---l---i---_--a---,- - -r -- r - - T - - -
il'_ I i Ida/V" , I i , , , , , ,_f %t ' hfl , , , , , , , , ,
._il£_J.__j___,__..,___ L__ -_ - _ __I- _'- - -'- - -'- - - F- - _ - - -III' I I • _" I I I I l I I 't I I
l I I I I ! I I l I S i S J
__,__,__.___,___.__,__,__,__,___,___L__ L__J__.Ii i o i t i I I i _ I , ' II I I I I I I I I I I I I I
I J I , o , a i i , , , ' I| | I I I | I I I I II I I |a e I I .. l I I l ! I I I I
Time
{A}- ( 0.1/1,0.2/2,0.2/30.8/41.0/5}
a L a2 a3 a4 a5
Normal
_High _ VeryHigh
a6 a7 s8 a9 Variable
Fuzzy Membership for Unmodelable Variables
I Subsystem
Display (3)
#3}Sensivity
{_3}
Failure Pos!ibility Vector
i=
i=1
Failure Possibility for A Subsystem
-1-
Fuzzy Expert System
I
J
I
"1 II II II I
II
I
I I --I
I
I
I. .......... J
1 2
FuzzySwitch
I
I
!I|
!
I
Subsystem Expert Computer or
Element Logic Human Supervisor
Disaggrc_ate, ISubsystem
1. System disaggregated into n subsytems.
2. At each node, the failure possibility
is computed via fuzzy sets.
3. When failure possibility is high,
fuzzy switch triggers expert system for details.
--- ROBOTIC SPACE SIMULATION - , -
USE OF SIMULATION
• PRE-FLIGHT ANALYSIS
i• DEFINITION OF MISSION REQUIREMENTS
e• PERFORMANCE ENVELOPES
00 FLIGHT ASSESSMENT
DEVELOPMENT OF MISSION
ee OPERATIONS
PROCEDURES
INTEGRATION OF
SUBSYSTEMS
I•
I•
SCENARIOS
SEVERAL VEHICLES AND
INTO A COORDINATED SCENARIO
INTRODUCTION OF NEW VEHICLES I SUBSYSTEMS
o• SPECIFICATION AND ANALYSIS
e• SUBSYSTEMS REQUIREMENTS ANALYSIS
,, , LinCom ----
--- ROBOTIC SPACE SIMULATION
INTEGRATION OF ROBOTICS/VISION ALGORITHMS
INTO AN ORBITAL OPERATIONS SIMULATION
• TESTBED REQUIREMENTS
ie MODULARITY
ii RAPID PROTOTYPING
on FIDELITY
• ROBOTICS COMPONENTS IN OOS
• o VISION
o• REMOTE MANIPULATOR SYSTEM (RMS)
ii AUTOMATED FLIGHT i EXPERT SYSTEMS
- LinCom ----
i
Z0I
F,.,-.
..J
m
t,,l,.IU
Um
I,-.,.-0
Ot,,,z,
L
:._.i,[-.-.-..-.,...-.-...-,,.-.-.-o-.,.,.o.%-,-,,,-.-,-.-,-,-.-.-,-, -. ..............
• • •
ZC:3i.__ c:)
u I.--,,, Zx E3
I._.)
0r,,,,,)
n i m
Z0m
b-
.<
i
CO
(_).<
Go
um
F--0cC_0C_
........... _ OOO0 O0
>.
ll:x
i,it_2,
-- -- U'_ -- 0
tDZ
c-_ -T-O _.__- co
Z
!-- 0Z_ cv_-u_ Zx
r_
<[ 0-__,,,-- rvI.IJ "--.I--- Q-
o0 r-_I
r
,_ ROBOTIC SPACE SIMULATION -,
CURRENT EFFORT
INTEGRATION OF VISION ALGORTHMSWITH ORBITAL MANUVERING VEHICLE (OMV) MODEL
• VISION ALGORITHMS FROM RICE UNIVERSITY
o• OBJECT IDENTIFICATION
ore• MOMENT INVARIANT/ATTRIBUTED GRAPH (MIAG):
em ATTITUDE DETERMINATION
coo GENERALIZED IMAGE POINT CORRESPONDENCE (GIPC):
• co MIAG EXTENSION (TENSORS)
• OMV MODEL
o• RIGID BODY DYNAMICS
oe REACTION CONTROL SYSTEM (RCS)JETS
om OMV FLIGHT SOFTWARE (CONTROL SYSTEM, GUIDANCE, ETC)
e• CAMERA MODEL
• ore FOCAL LENGTH , RANGE , FIELD OF VIEW
moo EXTRACTION OF 2D WIREFRAME
(LOW-LEVEL IMAGE PROCESSING)
LinCom ----
i l
-- --_-- "
"JiOll Illlllllll_
I _.w l u.
8JJB_PSBJh'Jf
Z
- f.l ! _m I m
"JfPJfJfIJlJPPfl.PJ'J'f
___- I ._-
I _"
t.
i i
__ _- ..._
Z Z Z _ _ _ _ _-- _
1--_ __ __
IIIIIIIIIIIIIIIIIIilllllllllllllll
_Z
_Z_
_ _ __
_lllllllllllllllllllllllllllllllll,
,^z_ <_z _ _<__ _ _ _ _ _ _ _ _ _ _ ....
flllllllllllllllllllllllllllllllll
__Z__Z__ _
i i u
ROBOTIC SPACE SIMULATION
CURRENT STATUS
• ALGORITHMS IMPLEMENTATION COMPLETE
Ie CAMERA MODEL
• e FUNCTIONAL WIREFRAME EXTRACTION
IW MIAG IDENTIFICATION AND GIPC ATTITUDE
DETERMINATION IN OOS
• INTEGRATION TESTING IN PROGRESS
me MODULE INTERFACES COMPLETE
aa NEW EVENT-DRIVEN OMV SEQUENCER GENERATED
• TEST CASE DESCRIPTION
se THREE VEHICLES IN SAME ORBIT
ea OMV WITH CAMERA IN LOWER ORBIT
oe AS OMV APPROACHES TARGET. THE VISION
ALGORITHMS WILL IDENTIFY OBJECT AND
COMPUTE ATTITUDE AND ATTITUDE RATES
LinCom -=--
ROBOTIC SPACE SIMULATION
END OF PRESEMTATION
LinCom_
*U._. t,O_ERI41_._NT pgI_TING OFF$C£:L988 66t-00818069I