The SAE AADL standard [1] provides the foundations for describing the architecture of safety-critical cyber-physical systems. AADL is a modeling language, equipped with a syntax definition and several legality and consistency rules that define the notions of model validity and its semantics. Several research activities illustrated how AADL can be used to model complex systems and to analyze them for key quality attributes such as performance, safety, or security.
In 2016, DARPA hosted the Cyber Grand Challenge (CGC), a competition to create automatic cyber reasoning systems. Together with a team from the University of Virginia, GrammaTech won second place out of over 100 teams. We present Proteus: the maturation of this technology from operating in a simple, controlled, and academic environment to modern, real-world operating systems.
A well-known challenge of end-to-end tooling of CPS products in the aerospace and automotive industries is heterogeneity and the large number of distinct tools required in the model-based engineering process. Composition and verification of heterogeneous, interacting product models requires an end-to-end integrated tool chain that includes a diverse collection of COTS, open source, and proprietary tools. This is difficult because it is not simply a tool interoperability problem, but rather a major semantic integration problem.
The aerospace industry is investigating the use of machine learning (ML) in new products to realize increased automation, autonomous operations, computational efficiency, and new market opportunities. In response to this growing demand, the community is actively developing guidelines and standards for fielding trustworthy ML-enabled avionics systems for aircraft.
Cyber-Physical Systems (CPS) are increasingly incorporating Learning-Enabled Components (LEC) to implement complex functions. By LEC we mean a component (typically, but not exclusively, realized in software) implemented with the help of data-driven techniques, e.g., machine learning.
The ultimate goal of a sound attestation process is to establish the integrity of a target of measurement - one or more components on a target system whose integrity is of interest to the consumer of an attestation. Copland is a domain- speci c-language for specifying remote attestation protocols with primitives for layered measurement, remote requests, and cryptographic evidence bundling.
As systems become increasingly autonomous, the human-machine role allocation changes. This can result in new failure modes of concern in safety-critical applications such as Urban Air Mobility (UAM). In the Assured Human Machine Interface for Increasingly Autonomous Systems (AHMIIAS) project with NASA, we developed a framework for 1) specifying the roles of a human operator and autonomous co-pilot, 2) verifying that the team satisfies safety properties, and 3) verifying that the autonomous co-pilot meets its requirements.
As various economical and technological factors collide, the next generation of computing systems - from the edge to the cloud - will start to look very different from how today's systems are being designed and optimized. The oscillation between aggregation and disaggregation of resources, pivots to advanced 3D heterogeneous integration in packages, chiplet architectures and interoperable non-Ethernet fabrics, and economic challenges with scalable systems will result in a "shared everything" platform architecture.
Mr. Chris Inglis served as the Senate confirmed U.S. National Cyber Director from 2021 to 2023 as the President's senior advisor for cyber issues and led the development of national cyber policy and strategy. He previously retired from the National Security Agency in January 2014 after 41 years of federal service, including 17 years as senior executive and 7.5 years as its Deputy Director.
Mr. Chris Inglis served as the Senate confirmed U.S. National Cyber Director from 2021 to 2023 as the President's senior advisor for cyber issues and led the development of national cyber policy and strategy. He previously retired from the National Security Agency in January 2014 after 41 years of federal service, including 17 years as senior executive and 7.5 years as its Deputy Director.
