Introduction |
|
xiii | |
|
Chapter 1 From the System to the Software |
|
|
1 | (12) |
|
|
1 | (1) |
|
1.2 Command/control system |
|
|
2 | (4) |
|
|
6 | (2) |
|
|
8 | (3) |
|
|
8 | (1) |
|
1.4.2 Different types of software |
|
|
9 | (1) |
|
1.4.3 The software application in its proper context |
|
|
10 | (1) |
|
|
11 | (2) |
|
Chapter 2 Railway Standards |
|
|
13 | (18) |
|
|
13 | (1) |
|
|
14 | (2) |
|
|
14 | (1) |
|
|
15 | (1) |
|
2.3 History between CENELEC and the 1EC |
|
|
16 | (1) |
|
2.4 CENELEC referential framework |
|
|
17 | (6) |
|
|
17 | (1) |
|
|
18 | (3) |
|
|
21 | (1) |
|
|
22 | (1) |
|
2.4.5 Safety versus availability |
|
|
22 | (1) |
|
|
23 | (3) |
|
|
26 | (4) |
|
|
26 | (1) |
|
|
26 | (2) |
|
2.6.3 Comparison of 2001 and 2011 versions |
|
|
28 | (2) |
|
|
30 | (1) |
|
Chapter 3 Risk and Safety Integrity Level |
|
|
31 | (36) |
|
|
31 | (1) |
|
|
31 | (6) |
|
|
37 | (24) |
|
|
37 | (3) |
|
|
40 | (7) |
|
|
47 | (3) |
|
3.3.4 Determination of the SIL |
|
|
50 | (5) |
|
|
55 | (1) |
|
|
56 | (1) |
|
|
57 | (1) |
|
|
58 | (1) |
|
|
59 | (1) |
|
3.3.10 Identification of safety requirements |
|
|
60 | (1) |
|
3.4 In IEC 61508 and IEC 61511 |
|
|
61 | (5) |
|
|
62 | (2) |
|
|
64 | (2) |
|
|
66 | (1) |
|
|
66 | (1) |
|
Chapter 4 Software Assurance |
|
|
67 | (42) |
|
|
67 | (1) |
|
|
67 | (1) |
|
|
68 | (10) |
|
|
68 | (1) |
|
4.3.2 Quality assurance management |
|
|
69 | (4) |
|
4.3.3 Realization of a software application |
|
|
73 | (2) |
|
4.3.4 Software quality assurance plan (SQAP) |
|
|
75 | (3) |
|
|
78 | (4) |
|
4.4.1 Typical organization |
|
|
78 | (2) |
|
|
80 | (2) |
|
4.5 Configuration management |
|
|
82 | (2) |
|
4.6 Safety assurance management |
|
|
84 | (2) |
|
4.7 Verification and validation |
|
|
86 | (18) |
|
|
86 | (1) |
|
|
87 | (16) |
|
|
103 | (1) |
|
4.8 Independent assessment |
|
|
104 | (1) |
|
|
104 | (1) |
|
|
105 | (1) |
|
4.11 Appendix A: List of quality documents to be produced |
|
|
106 | (1) |
|
4.12 Appendix B: structure of a software quality assurance plan |
|
|
106 | (3) |
|
Chapter 5 Requirements Management |
|
|
109 | (46) |
|
|
109 | (1) |
|
5.2 Requirements acquisition phase |
|
|
110 | (19) |
|
|
110 | (1) |
|
5.2.2 Requirements elicitation |
|
|
111 | (8) |
|
5.2.3 Process of analysis and documentation |
|
|
119 | (7) |
|
5.2.4 Verification and validation of the requirements |
|
|
126 | (3) |
|
5.3 Requirements specification |
|
|
129 | (11) |
|
5.3.1 Requirements characterization |
|
|
129 | (6) |
|
5.3.2 Characterization of requirements specification |
|
|
135 | (1) |
|
5.3.3 Expression of requirements |
|
|
135 | (5) |
|
5.3.4 Requirements validation |
|
|
140 | (1) |
|
5.4 Requirements realization |
|
|
140 | (10) |
|
|
140 | (1) |
|
|
141 | (2) |
|
|
143 | (3) |
|
|
146 | (4) |
|
5.5 Requirements management |
|
|
150 | (4) |
|
|
150 | (1) |
|
|
151 | (1) |
|
5.5.3 Implementation of tools |
|
|
152 | (2) |
|
|
154 | (1) |
|
Chapter 6 Data Preparation |
|
|
155 | (46) |
|
|
155 | (1) |
|
|
156 | (1) |
|
|
156 | (2) |
|
6.4 Data-parameter-based system |
|
|
158 | (7) |
|
|
158 | (3) |
|
6.4.2 Characterization of data |
|
|
161 | (1) |
|
|
162 | (2) |
|
|
164 | (1) |
|
6.5 From the system to the software |
|
|
165 | (4) |
|
|
165 | (2) |
|
6.5.2 What the CENELEC framework does not say |
|
|
167 | (2) |
|
6.6 Data preparation process |
|
|
169 | (5) |
|
|
169 | (1) |
|
6.6.2 Presentation of section 8 of the CENELEC 50128:2011 standard |
|
|
170 | (4) |
|
6.7 Data preparation process |
|
|
174 | (25) |
|
6.7.1 Management of the data preparation process |
|
|
174 | (8) |
|
|
182 | (1) |
|
6.7.3 Specification phase |
|
|
182 | (4) |
|
|
186 | (4) |
|
|
190 | (6) |
|
6.7.6 Integration of the application and acceptance of the tests |
|
|
196 | (1) |
|
6.7.7 Validation and evaluation of the application |
|
|
197 | (1) |
|
6.7.8 Procedure and tools for preparation of the application |
|
|
197 | (1) |
|
6.7.9 Development of generic software |
|
|
198 | (1) |
|
|
199 | (1) |
|
6.9 Appendix: documentation to be produced |
|
|
199 | (2) |
|
Chapter 7 Generic Application |
|
|
201 | (60) |
|
|
201 | (1) |
|
7.2 Software application realization process |
|
|
201 | (2) |
|
7.3 Realization of a generic application |
|
|
203 | (46) |
|
7.3.1 Specification phase |
|
|
203 | (10) |
|
7.3.2 Architecture and component design phase |
|
|
213 | (23) |
|
7.3.3 Component design phase |
|
|
236 | (6) |
|
|
242 | (1) |
|
7.3.5 Execution of component tests |
|
|
243 | (3) |
|
7.3.6 Software integration phase |
|
|
246 | (1) |
|
7.3.7 Overall software testing phase |
|
|
247 | (2) |
|
7.4 Some feedback on past experience |
|
|
249 | (1) |
|
|
250 | (1) |
|
7.6 Appendix A: the programming language "Ada" |
|
|
251 | (2) |
|
7.7 Appendix B: the programming language "C" |
|
|
253 | (2) |
|
|
253 | (1) |
|
7.7.2 The difficulty with C |
|
|
253 | (1) |
|
|
254 | (1) |
|
|
255 | (1) |
|
7.8 Appendix C: introduction to object-oriented languages |
|
|
255 | (3) |
|
7.9 Appendix D: documentation needing to be produced |
|
|
258 | (3) |
|
Chapter 8 Modeling and Formalization |
|
|
261 | (26) |
|
|
261 | (1) |
|
|
261 | (4) |
|
|
261 | (2) |
|
8.2.2 Different types of modeling |
|
|
263 | (1) |
|
|
264 | (1) |
|
8.3 Use of formal techniques and formal methods |
|
|
265 | (4) |
|
|
265 | (3) |
|
|
268 | (1) |
|
8.4 Brief introduction to formal methods |
|
|
269 | (10) |
|
|
269 | (1) |
|
8.4.2 Usage in the railway domain |
|
|
270 | (6) |
|
|
276 | (3) |
|
8.5 Implementation of formal methods |
|
|
279 | (5) |
|
8.5.1 Conventional processes |
|
|
279 | (1) |
|
8.5.2 Process including formal methods |
|
|
280 | (2) |
|
|
282 | (2) |
|
8.6 Maintenance of the software application |
|
|
284 | (1) |
|
|
285 | (2) |
|
Chapter 9 Tool Qualification |
|
|
287 | (22) |
|
|
287 | (1) |
|
9.2 Concept of qualification |
|
|
288 | (5) |
|
|
288 | (1) |
|
|
288 | (3) |
|
|
291 | (1) |
|
|
292 | (1) |
|
|
293 | (1) |
|
|
293 | (12) |
|
|
293 | (1) |
|
|
294 | (1) |
|
9.3.3 Qualification process |
|
|
295 | (2) |
|
9.3.4 Implementation of the qualification process |
|
|
297 | (8) |
|
|
305 | (1) |
|
|
305 | (1) |
|
9.4.2 In case of incompatibility |
|
|
305 | (1) |
|
|
306 | (1) |
|
|
306 | (1) |
|
9.5.1 Identification of versions |
|
|
306 | (1) |
|
9.5.2 Bug/defect analysis |
|
|
307 | (1) |
|
|
307 | (1) |
|
9.6 Qualification process |
|
|
307 | (1) |
|
|
307 | (1) |
|
|
308 | (1) |
|
9.6.3 Qualification of non-commercial tools |
|
|
308 | (1) |
|
|
308 | (1) |
|
Chapter 10 Maintenance and Deployment |
|
|
309 | (12) |
|
|
309 | (1) |
|
|
309 | (3) |
|
|
309 | (1) |
|
|
310 | (2) |
|
|
312 | (3) |
|
|
312 | (1) |
|
|
313 | (1) |
|
|
314 | (1) |
|
10.4 Software maintenance |
|
|
315 | (1) |
|
|
315 | (1) |
|
|
315 | (1) |
|
|
316 | (2) |
|
|
318 | (1) |
|
10.7 Appendix: documentation needing to be produced |
|
|
319 | (2) |
|
Chapter 11 Assessment and Certification |
|
|
321 | (8) |
|
|
321 | (1) |
|
|
321 | (4) |
|
|
321 | (3) |
|
11.2.2 CENELEC 50128:2011 |
|
|
324 | (1) |
|
|
325 | (1) |
|
|
326 | (2) |
|
11.4.1 Product certification |
|
|
326 | (1) |
|
11.4.2 Software certification |
|
|
327 | (1) |
|
11.4.3 Evolution management |
|
|
327 | (1) |
|
|
328 | (1) |
|
11.6 Appendix: documentation needing to be produced |
|
|
328 | (1) |
Conclusion |
|
329 | (2) |
Bibliography |
|
331 | (12) |
Glossary |
|
343 | (8) |
Index |
|
351 | |