**Description**
Certification standards for high-assurance systems include objectives for demonstrating compliance of process artifacts such as requirements and code with style guidelines. With the emergence of model-based development, similar objectives have been specified that apply to models. Some style guidelines are standardized and widely used across an industry (e.g., MISRA C), but typically it is up to a development organization to select or author a style guide, and then demonstrate compliance with it. Demonstration of compliance is typically a certification objective associated with a review and is often achieved by employing a static analysis “linter” tool.
This paper describes Resolint, an open-source, lightweight tool for checking compliance of Architecture Analysis and Design Language (AADL) models with modeling guidelines. AADL allows engineers to describe the key elements of distributed, real-time, embedded system architectures (e.g., memory, buses, threads, etc.) with a sufficiently rigorous semantics. In addition, AADL provides an annex mechanism for extending the base language, enabling new kinds of analyses and tool support. Resolint uses the AADL annex capability to provide a language for specifying style guide rule sets. It is implemented as a plugin for the Eclipse-based Open Source AADL Tool Environment (OSATE) and includes an engine for evaluating whether an AADL model complies with the specified rule sets. Rule violations indicate severity and are hyperlinked to the model element that is out of compliance with the rule. Results of the Resolint analysis are displayed to the user and can even be automatically incorporated as evidence in a system assurance case using the companion Resolute tool.
To illustrate the features of Resolint, we present two use cases involving the assurance of embedded avionics applications. In the first, Resolint is used to ensure the model only contains an appropriate subset of AADL syntax accepted by a target analysis tool. In the second, Resolint is used to produce assurance evidence that an AADL model complies with modeling guidelines. We further describe how we applied Resolint in the evaluation, synthesis, and assurance of a cyber-resilient UAV surveillance application developed on the DARPA Cyber Assured Systems Engineering (CASE) program.

**Author(s) - ranked in descending order of contribution / as it should appear when published**
Isaac Amundson



Compliance of AADL Models with Modeling Guidelines using Resolint

SAE International’s AeroTech is the premier global aerospace technology conference and exhibition focused on and celebrating innovation in virtually every facet of modern aerospace and defense mobility, including platform, system, subsystem, component, and material research and development, engineering, manufacturing, assembly, test and validation, certification, integration, deployment, sustainment, safety, security, and sustainability. Innovators and thought-leaders from the global aerospace community convene annually at AeroTech to share and learn about the latest advancements and achievements, advance technical knowledge and innovation, discuss challenges and practical solutions, discover new technologies and techniques, uncover trends and opportunities, network, and collaborate.