SlideShare a Scribd company logo
Innovate with confidence – Functional 
Verification of Embedded Algorithms 
© 2011 The MathWorks, Inc1. 
Dr. Joachim Schlosser 
Senior Team Leader Application Engineering 
MathWorks
Innovation aber sicher – Funktionale 
Verifikation von Algorithmen in 
Embedded Systems 
© 2011 The MathWorks, Inc2. 
Dr. Joachim Schlosser 
Senior Team Leader Application Engineering 
MathWorks
3 
Innovation aber sicher – Funktionale Verifikation 
von Algorithmen in Embedded Systems 
Zusammenfassung 
Bei der Entwicklung von Embedded Systemen werden bereits vielfach 
Simulink und Stateflow zur Simulation des Systemverhaltens eingesetzt. Die 
grafische Bedienoberfläche erlaubt hierbei die schnelle und übersichtliche 
Modellierung des Systems. Da mit der Modellierung bereits eine detaillierte 
mathematische Beschreibung des Systems vorliegt, ist der Weg zum automatisch 
erzeugten Code nur der nächste logische Schritt. 
Mit diesem Vortrag erhalten Sie einen Überblick über die Verifikation der 
Modellierung in Simulink und Stateflow. Das Methodenspektrum reicht dabei von 
der automatischen Überprüfung von Modellierungsrichtlinien und der Verwendung 
bidirektionaler Verknüpfungen zwischen Anforderungen und Modell über die 
Durchführung von Tests und der Messung der erzielten Testabdeckung bis hin 
zum Einsatz formaler Methoden zur unterstützenden Testgenerierung und dem 
Korrektheitsbeweis eines Modells. 
Optional wird auf die Vorteile der Stateflow-Modellierung, Varianten-Handling 
auf Modell- und Code-Ebene eingegangen.
4 
Innovate with confidence – Functional Verification 
of Embedded Algorithms 
Abstract 
For development of embedded systems Simulink and Stateflow are 
already widely used to simulate the system behavior. The graphical 
user interface allows quick and clear modeling of the system’s 
dynamics and structure. Since the models already represent a 
detailed mathematical description of the system, the way to 
automatically generate code is only the next logical step. 
This presentation provides an overview of the verification in 
Simulink and Stateflow. The methods range from the automatic review 
of modeling guidelines and the use of bidirectional links between 
requirements and model on the testing and measuring the achieved 
test coverage up to the use of formal methods to support test 
generation and correctness proof of a model. 
Optionally, the benefits of Stateflow modeling, variant handling on 
model and code level can be discussed.
5
6 
Detect System Integration Issues In Simulation 
Model: 
Actuator 
(Ideal) 
Inputs 
System 
(Include) 
Actuator 
(Realistic) 
System 
(Ignore) 
Mechanical 
Hydraulic 
Electrical 
Controls 
Park 
Spin 
Supervisory 
Logic 
Lift 
Drag 
Wind 
Aero-dynamics
7 
“Accurate modeling is essential not only for planning 
investments but also to detect situations that can cause 
an outage. With MathWorks tools, we can simulate 
power electronics, mechanics, and control systems in 
one environment, and our models respond like the 
turbines we have in the field.” 
Richard Gagnon 
Hydro-Québec 
Turbines on a wind farm Link to user story
8 
Model-Based Design – Early Verification 
DESIGN 
Environment Models 
Physical Components 
Algorithms 
IMPLEMENTATION 
INTEGRATION 
TEST & VERIFICATION 
RESEARCH REQUIREMENTS 
MCU DSP FPGA ASIC 
Structured 
Text 
C, C++ VHDL, Verilog 
TEST 
SYSTEM 
PLC
10
11 
Model-Based Design – Early Verification 
REQUIREMENTS 
DESIGN 
Model 
IMPLEMENTATION 
Code 
INTEGRATION
12 
“Polyspace enabled us to dramatically 
reduce our workload per analysis — from 
several man-months to a matter of days.” 
Svetoslav Stoyanov 
ELESYS North America 
Airbag deployment during a frontal crash test 
Link to user story
13
14 
Model-Based Design – Early Verification 
REQUIREMENTS 
DESIGN 
Model 
IMPLEMENTATION 
Code 
INTEGRATION
15 
“When Alstom delivered a Pendolino train to 
Czech Railways, the railway application was 
the first with automatically generated code 
to receive TÜV certification.” 
Han Geerligs 
Alstom 
Pendolino tilting train, w/ Safety-Critical Power Converter 
Control System 
Link to user story
16
17 
Model-Based Design – Early Verification 
REQUIREMENTS 
DESIGN 
Model 
IMPLEMENTATION 
Code 
INTEGRATION
18 
“Developing an HVAC system as complex as ours by 
hand-coding in C would not be possible. Model-Based 
Design not only made development possible, it also 
made it faster while enabling us to verify and test 
months earlier than we could before.” 
Johan Hägnander 
GM Engineering Europe 
Link to user story 
One of 54 types of GM vehicle dashboard with 
the HVAC control system installed
19
20 
Model-Based Design – Early Verification 
REQUIREMENTS 
DESIGN 
Model 
IMPLEMENTATION 
Code 
INTEGRATION
21 
“Everyone knows that errors are much less 
expensive to fix when you find them early. With 
Simulink Design Verifier, we build on the advantages 
of Model-Based Design by performing formal testing 
in the first phases of development.” 
Christoph Hellwig 
TRW 
TRW Electric Parking Break 
Link to user story
22 
Start really using Simulink now! 
 Browse mathworks.com/model-based-design/ 
 Reach me at 
@schlosi 
And a final one: 
live now!
23 
Model-Based Design – Early Verification 
REQUIREMENTS 
DESIGN 
Model 
IMPLEMENTATION 
Code 
INTEGRATION
24 
Backup / References
25 
Alstom Generates Production Code for 
Safety-Critical Power Converter Control 
Systems 
Challenge 
Design and implement real-time power conversion and 
control systems for trams, metros, and railways 
Solution 
Use MathWorks tools for Model-Based Design to design, 
simulate, and automatically generate production code for 
safety-critical transportation systems 
Results 
 Development time cut by 50% 
 Defect-free, safety-critical code generated and certified 
 Common language established 
“When Alstom delivered a 
Pendolino train to Czech 
Railways, the railway 
application was the first with 
automatically generated code 
to receive TUV certification.” 
Han Geerligs 
Alstom 
Pendolino tilting train. 
Link to user story
26 
GM Engineering Europe Develops HVAC 
Controller for GM Vehicles Using Model- 
Based Design 
Challenge 
Design an advanced HVAC embedded controller for 
GM vehicles worldwide 
Solution 
Use MathWorks tools and Model-Based Design to 
develop and implement a real-time controller with 
reusable components 
Results 
 System models reused across 54 vehicles 
 Quality improved through early verification 
 Team communication improved 
“Developing an HVAC system as 
complex as ours by hand-coding in 
C would not be possible. Model- 
Based Design not only made 
development possible, it also made 
it faster while enabling us to verify 
and test months earlier than we 
could before." 
Johan Hägnander 
GM Engineering Europe 
Link to user story 
GM vehicle dashboard with the HVAC control 
system installed.
27 
ELESYS North America Speeds Verification 
of Safety-Critical Embedded Software with 
Polyspace Products for C/C++ 
Challenge 
Accelerate the verification of airbag suppression systems 
Solution 
Use Polyspace to detect run-time errors in safety-critical 
embedded software 
Results 
 Verification in days, not months 
 Hard-to-find bugs located 
 Testing efficiency increased 
Airbag deployment during a frontal crash test. 
"Polyspace enabled us to 
dramatically reduce our workload 
per analysis — from several man-months 
to a matter of days." 
Svetoslav Stoyanov 
ELESYS North America 
Link to user story
28 
TRW Automotive Develops and Tests 
Electric Parking Brake Using Simulink 
and Simulink Design Verifier 
Challenge 
Design tests for an electric parking brake control system 
Solution 
Use Simulink Design Verifier to automatically generate 
tests that maximize model coverage and enable 
systematic design verification 
Results 
 Test development time reduced from days to hours 
 100 percent model coverage achieved 
 Formal testing begun two months into the project 
“Everyone knows that errors are 
much less expensive to fix when 
you find them early. With Simulink 
Design Verifier, we build on the 
advantages of Model-Based Design 
by performing formal testing in the 
first phases of development." 
Christoph Hellwig 
TRW 
Link to user story 
Electronic parking brake control system.

More Related Content

PDF
5 verification methods
PDF
6 verification tools
PDF
Verification flow and_planning_vlsi_design
PDF
2019 5 testing and verification of vlsi design_fault_modeling
PDF
4 verification flow_planning
PDF
Automatic Test Pattern Generation (Testing of VLSI Design)
PDF
2019 1 testing and verification of vlsi design_introduction
PDF
Introduction of testing and verification of vlsi design
5 verification methods
6 verification tools
Verification flow and_planning_vlsi_design
2019 5 testing and verification of vlsi design_fault_modeling
4 verification flow_planning
Automatic Test Pattern Generation (Testing of VLSI Design)
2019 1 testing and verification of vlsi design_introduction
Introduction of testing and verification of vlsi design

What's hot (20)

PDF
2019 2 testing and verification of vlsi design_verification
PDF
Fault Simulation (Testing of VLSI Design)
PDF
Bert Zuurke - A Lean And Mean Approach To Model-Based Testing - EuroSTAR 2010
PPT
ISTQB, ISEB Lecture Notes
PDF
[Paul Holland] Bad Metrics and What You Can Do About It
PPT
Henk Doornbos & Rix Groenboom - Test Patterns: A New Concept For Testing
PPT
Mining Performance Regression Testing Repositories for Automated Performance ...
PPT
Rob Baarda - Are Real Test Metrics Predictive for the Future?
PPT
'How To Apply Lean Test Management' by Bob van de Burgt
PDF
Edwin Van Loon - How Much Testing is Enough - EuroSTAR 2010
PDF
[Quang Nguyen] Performance Test in Best Practices
PDF
Testing the Untestable: Model Testing of Complex Software-Intensive Systems
PPTX
What is automation testing | David Tzemach
PPTX
Understanding the Rationale for Updating a Function's Comment
PPTX
Icse 2011 ds_1
PDF
Documented Requirements are not Useless After All!
PPTX
Effective Test Cases & Introduction to Hexawise
PPT
Test Estimation
PDF
Enabling Automated Software Testing with Artificial Intelligence
PPTX
Modeling the Performance of Ultra-Large-Scale Systems Using Layered Simulations
2019 2 testing and verification of vlsi design_verification
Fault Simulation (Testing of VLSI Design)
Bert Zuurke - A Lean And Mean Approach To Model-Based Testing - EuroSTAR 2010
ISTQB, ISEB Lecture Notes
[Paul Holland] Bad Metrics and What You Can Do About It
Henk Doornbos & Rix Groenboom - Test Patterns: A New Concept For Testing
Mining Performance Regression Testing Repositories for Automated Performance ...
Rob Baarda - Are Real Test Metrics Predictive for the Future?
'How To Apply Lean Test Management' by Bob van de Burgt
Edwin Van Loon - How Much Testing is Enough - EuroSTAR 2010
[Quang Nguyen] Performance Test in Best Practices
Testing the Untestable: Model Testing of Complex Software-Intensive Systems
What is automation testing | David Tzemach
Understanding the Rationale for Updating a Function's Comment
Icse 2011 ds_1
Documented Requirements are not Useless After All!
Effective Test Cases & Introduction to Hexawise
Test Estimation
Enabling Automated Software Testing with Artificial Intelligence
Modeling the Performance of Ultra-Large-Scale Systems Using Layered Simulations
Ad

Similar to Innovate with confidence – Functional Verification of Embedded Algorithms (20)

PPTX
It‘s Math That Drives Things – Simulink as Simulation and Modeling Environment
PDF
Making Model-Driven Verification Practical and Scalable: Experiences and Less...
PDF
Presentation Verification & Validation
PDF
modelling-and-simulation-made-easy-with-simulink.pdf
PDF
Simulink Stateflow workshop
PDF
Model-based Development for Vehicular Embedded Systems
PDF
Automotive engineering design - Model Based Design
PDF
"How to Test and Validate an Automated Driving System," a Presentation from M...
PPTX
virtual-system-integration-and-early-functional-validation-in-the-whole-vehic...
PDF
Model_Based_Development_Overview_V_Cycle
PPTX
Model based design-Hardware in loop-software in loop
PDF
MIL_SIL.pdf
PPT
Model-Based Design & Analysis.ppt
PDF
Testing of Cyber-Physical Systems: Diversity-driven Strategies
PDF
Cyber Physical Systems – Collaborating Systems of Systems
PDF
SBST 2019 Keynote
DOCX
Karthick CV.docx
PPTX
How to use SIMULINK a hands on training.pptx
PPTX
Beyond digitalisation 2016-06-07
PDF
Project P erts2012
It‘s Math That Drives Things – Simulink as Simulation and Modeling Environment
Making Model-Driven Verification Practical and Scalable: Experiences and Less...
Presentation Verification & Validation
modelling-and-simulation-made-easy-with-simulink.pdf
Simulink Stateflow workshop
Model-based Development for Vehicular Embedded Systems
Automotive engineering design - Model Based Design
"How to Test and Validate an Automated Driving System," a Presentation from M...
virtual-system-integration-and-early-functional-validation-in-the-whole-vehic...
Model_Based_Development_Overview_V_Cycle
Model based design-Hardware in loop-software in loop
MIL_SIL.pdf
Model-Based Design & Analysis.ppt
Testing of Cyber-Physical Systems: Diversity-driven Strategies
Cyber Physical Systems – Collaborating Systems of Systems
SBST 2019 Keynote
Karthick CV.docx
How to use SIMULINK a hands on training.pptx
Beyond digitalisation 2016-06-07
Project P erts2012
Ad

More from Joachim Schlosser (9)

PPTX
Scrum für Embedded-Software: Gut – aber aus anderen Gründen, als Ihr Manager...
PPTX
Vernetzung von Forschung und Lehre und Unternehmertum
PDF
Accelerating the Pace of Engineering Education with Simulation, Hardware and ...
PDF
Architectural Simulation of Distributed ECU Systems
PDF
Den Datenschatz heben und Zeit- und Energieeffizienz steigern: Mathematik und...
PPTX
Simulink for Work Groups Using Simulink Projects
PDF
Modellbildung, Berechnung und Simulation in Forschung und Lehre
PDF
MathWorks and Freescale Cup - Working with MATLAB & Simulink
PPTX
Effektiv lernen - Lehren mit MATLAB
Scrum für Embedded-Software: Gut – aber aus anderen Gründen, als Ihr Manager...
Vernetzung von Forschung und Lehre und Unternehmertum
Accelerating the Pace of Engineering Education with Simulation, Hardware and ...
Architectural Simulation of Distributed ECU Systems
Den Datenschatz heben und Zeit- und Energieeffizienz steigern: Mathematik und...
Simulink for Work Groups Using Simulink Projects
Modellbildung, Berechnung und Simulation in Forschung und Lehre
MathWorks and Freescale Cup - Working with MATLAB & Simulink
Effektiv lernen - Lehren mit MATLAB

Recently uploaded (20)

PPTX
Odoo POS Development Services by CandidRoot Solutions
PDF
Digital Strategies for Manufacturing Companies
PDF
Design an Analysis of Algorithms II-SECS-1021-03
PPTX
ai tools demonstartion for schools and inter college
PDF
Odoo Companies in India – Driving Business Transformation.pdf
PDF
Adobe Illustrator 28.6 Crack My Vision of Vector Design
PPTX
L1 - Introduction to python Backend.pptx
PPTX
CHAPTER 2 - PM Management and IT Context
PDF
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
PPTX
Reimagine Home Health with the Power of Agentic AI​
PDF
Which alternative to Crystal Reports is best for small or large businesses.pdf
PDF
Addressing The Cult of Project Management Tools-Why Disconnected Work is Hold...
PDF
How Creative Agencies Leverage Project Management Software.pdf
PPTX
Essential Infomation Tech presentation.pptx
PDF
Softaken Excel to vCard Converter Software.pdf
PPTX
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
PDF
wealthsignaloriginal-com-DS-text-... (1).pdf
PDF
AI in Product Development-omnex systems
PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 41
PDF
top salesforce developer skills in 2025.pdf
Odoo POS Development Services by CandidRoot Solutions
Digital Strategies for Manufacturing Companies
Design an Analysis of Algorithms II-SECS-1021-03
ai tools demonstartion for schools and inter college
Odoo Companies in India – Driving Business Transformation.pdf
Adobe Illustrator 28.6 Crack My Vision of Vector Design
L1 - Introduction to python Backend.pptx
CHAPTER 2 - PM Management and IT Context
Raksha Bandhan Grocery Pricing Trends in India 2025.pdf
Reimagine Home Health with the Power of Agentic AI​
Which alternative to Crystal Reports is best for small or large businesses.pdf
Addressing The Cult of Project Management Tools-Why Disconnected Work is Hold...
How Creative Agencies Leverage Project Management Software.pdf
Essential Infomation Tech presentation.pptx
Softaken Excel to vCard Converter Software.pdf
Agentic AI : A Practical Guide. Undersating, Implementing and Scaling Autono...
wealthsignaloriginal-com-DS-text-... (1).pdf
AI in Product Development-omnex systems
Internet Downloader Manager (IDM) Crack 6.42 Build 41
top salesforce developer skills in 2025.pdf

Innovate with confidence – Functional Verification of Embedded Algorithms

  • 1. Innovate with confidence – Functional Verification of Embedded Algorithms © 2011 The MathWorks, Inc1. Dr. Joachim Schlosser Senior Team Leader Application Engineering MathWorks
  • 2. Innovation aber sicher – Funktionale Verifikation von Algorithmen in Embedded Systems © 2011 The MathWorks, Inc2. Dr. Joachim Schlosser Senior Team Leader Application Engineering MathWorks
  • 3. 3 Innovation aber sicher – Funktionale Verifikation von Algorithmen in Embedded Systems Zusammenfassung Bei der Entwicklung von Embedded Systemen werden bereits vielfach Simulink und Stateflow zur Simulation des Systemverhaltens eingesetzt. Die grafische Bedienoberfläche erlaubt hierbei die schnelle und übersichtliche Modellierung des Systems. Da mit der Modellierung bereits eine detaillierte mathematische Beschreibung des Systems vorliegt, ist der Weg zum automatisch erzeugten Code nur der nächste logische Schritt. Mit diesem Vortrag erhalten Sie einen Überblick über die Verifikation der Modellierung in Simulink und Stateflow. Das Methodenspektrum reicht dabei von der automatischen Überprüfung von Modellierungsrichtlinien und der Verwendung bidirektionaler Verknüpfungen zwischen Anforderungen und Modell über die Durchführung von Tests und der Messung der erzielten Testabdeckung bis hin zum Einsatz formaler Methoden zur unterstützenden Testgenerierung und dem Korrektheitsbeweis eines Modells. Optional wird auf die Vorteile der Stateflow-Modellierung, Varianten-Handling auf Modell- und Code-Ebene eingegangen.
  • 4. 4 Innovate with confidence – Functional Verification of Embedded Algorithms Abstract For development of embedded systems Simulink and Stateflow are already widely used to simulate the system behavior. The graphical user interface allows quick and clear modeling of the system’s dynamics and structure. Since the models already represent a detailed mathematical description of the system, the way to automatically generate code is only the next logical step. This presentation provides an overview of the verification in Simulink and Stateflow. The methods range from the automatic review of modeling guidelines and the use of bidirectional links between requirements and model on the testing and measuring the achieved test coverage up to the use of formal methods to support test generation and correctness proof of a model. Optionally, the benefits of Stateflow modeling, variant handling on model and code level can be discussed.
  • 5. 5
  • 6. 6 Detect System Integration Issues In Simulation Model: Actuator (Ideal) Inputs System (Include) Actuator (Realistic) System (Ignore) Mechanical Hydraulic Electrical Controls Park Spin Supervisory Logic Lift Drag Wind Aero-dynamics
  • 7. 7 “Accurate modeling is essential not only for planning investments but also to detect situations that can cause an outage. With MathWorks tools, we can simulate power electronics, mechanics, and control systems in one environment, and our models respond like the turbines we have in the field.” Richard Gagnon Hydro-Québec Turbines on a wind farm Link to user story
  • 8. 8 Model-Based Design – Early Verification DESIGN Environment Models Physical Components Algorithms IMPLEMENTATION INTEGRATION TEST & VERIFICATION RESEARCH REQUIREMENTS MCU DSP FPGA ASIC Structured Text C, C++ VHDL, Verilog TEST SYSTEM PLC
  • 9. 10
  • 10. 11 Model-Based Design – Early Verification REQUIREMENTS DESIGN Model IMPLEMENTATION Code INTEGRATION
  • 11. 12 “Polyspace enabled us to dramatically reduce our workload per analysis — from several man-months to a matter of days.” Svetoslav Stoyanov ELESYS North America Airbag deployment during a frontal crash test Link to user story
  • 12. 13
  • 13. 14 Model-Based Design – Early Verification REQUIREMENTS DESIGN Model IMPLEMENTATION Code INTEGRATION
  • 14. 15 “When Alstom delivered a Pendolino train to Czech Railways, the railway application was the first with automatically generated code to receive TÜV certification.” Han Geerligs Alstom Pendolino tilting train, w/ Safety-Critical Power Converter Control System Link to user story
  • 15. 16
  • 16. 17 Model-Based Design – Early Verification REQUIREMENTS DESIGN Model IMPLEMENTATION Code INTEGRATION
  • 17. 18 “Developing an HVAC system as complex as ours by hand-coding in C would not be possible. Model-Based Design not only made development possible, it also made it faster while enabling us to verify and test months earlier than we could before.” Johan Hägnander GM Engineering Europe Link to user story One of 54 types of GM vehicle dashboard with the HVAC control system installed
  • 18. 19
  • 19. 20 Model-Based Design – Early Verification REQUIREMENTS DESIGN Model IMPLEMENTATION Code INTEGRATION
  • 20. 21 “Everyone knows that errors are much less expensive to fix when you find them early. With Simulink Design Verifier, we build on the advantages of Model-Based Design by performing formal testing in the first phases of development.” Christoph Hellwig TRW TRW Electric Parking Break Link to user story
  • 21. 22 Start really using Simulink now!  Browse mathworks.com/model-based-design/  Reach me at @schlosi And a final one: live now!
  • 22. 23 Model-Based Design – Early Verification REQUIREMENTS DESIGN Model IMPLEMENTATION Code INTEGRATION
  • 23. 24 Backup / References
  • 24. 25 Alstom Generates Production Code for Safety-Critical Power Converter Control Systems Challenge Design and implement real-time power conversion and control systems for trams, metros, and railways Solution Use MathWorks tools for Model-Based Design to design, simulate, and automatically generate production code for safety-critical transportation systems Results  Development time cut by 50%  Defect-free, safety-critical code generated and certified  Common language established “When Alstom delivered a Pendolino train to Czech Railways, the railway application was the first with automatically generated code to receive TUV certification.” Han Geerligs Alstom Pendolino tilting train. Link to user story
  • 25. 26 GM Engineering Europe Develops HVAC Controller for GM Vehicles Using Model- Based Design Challenge Design an advanced HVAC embedded controller for GM vehicles worldwide Solution Use MathWorks tools and Model-Based Design to develop and implement a real-time controller with reusable components Results  System models reused across 54 vehicles  Quality improved through early verification  Team communication improved “Developing an HVAC system as complex as ours by hand-coding in C would not be possible. Model- Based Design not only made development possible, it also made it faster while enabling us to verify and test months earlier than we could before." Johan Hägnander GM Engineering Europe Link to user story GM vehicle dashboard with the HVAC control system installed.
  • 26. 27 ELESYS North America Speeds Verification of Safety-Critical Embedded Software with Polyspace Products for C/C++ Challenge Accelerate the verification of airbag suppression systems Solution Use Polyspace to detect run-time errors in safety-critical embedded software Results  Verification in days, not months  Hard-to-find bugs located  Testing efficiency increased Airbag deployment during a frontal crash test. "Polyspace enabled us to dramatically reduce our workload per analysis — from several man-months to a matter of days." Svetoslav Stoyanov ELESYS North America Link to user story
  • 27. 28 TRW Automotive Develops and Tests Electric Parking Brake Using Simulink and Simulink Design Verifier Challenge Design tests for an electric parking brake control system Solution Use Simulink Design Verifier to automatically generate tests that maximize model coverage and enable systematic design verification Results  Test development time reduced from days to hours  100 percent model coverage achieved  Formal testing begun two months into the project “Everyone knows that errors are much less expensive to fix when you find them early. With Simulink Design Verifier, we build on the advantages of Model-Based Design by performing formal testing in the first phases of development." Christoph Hellwig TRW Link to user story Electronic parking brake control system.