Formal Specification and Automated Verification of Safety-Critical Requirements of a Railway Vehicle with Frama-C/Jessie

  • Kerstin Hartig
  • Jens Gerlach
  • Juan Soto
  • Jürgen Busse
Conference paper


Formal verification of software provides a higher level of assurance than classical software testing. In this paper, we report on our experience with the Frama-C/Jessie verification tool in the railway domain. We analyse safety-critical requirements of a railway vehicle, formalize them using the ANSI/ISO-C Specification Language (ACSL) and achieve automated proofs to verify that the implementation satisfies the formal specification. The main requirement for the successful application of Frama-C in the railway domain is its qualification according to EN 50128.


Frama-C/Jessie ACSL, Unit Proof EN 50128 Railway Domain 


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.



This work was completed within the DEVICE-SOFT project, which is supported by the Programme Inter Carnot Fraunhofer of the Federal Ministry of Education and Research (BMBF) (Grant 01SF0804) and the Agence Nationale de la Recherche (ANR).


  1. 1.
    CEA LIST, Laboratory of Applied Research on Software-Intensive Technologies,
  2. 2.
    Marché, C., Moy, Y.: Jessie Plugin Tutorial, Boron Version,, (2010)
  3. 3.
    Baudin, P., Filliâtre, J.-C., Marché, C., Monate, B., Moy, Y., Prevosto, V.: ACSL: ANSI/ISO C Specification Language, Version 1.4,, (2009)
  4. 4.
    Souyris, J., Favre-Felix, D.: Proof of properties in avionics, IFIP Congress Topical Sessions, pages 527-536, (2004)Google Scholar
  5. 5.
    Jim Woodcock, et al.: Formal Methods: Practice and Experience, ACM Computing Surveys, Volume 41, Issue 4 (October 2009)Google Scholar
  6. 6.
    Burghardt, J., Gerlach, J., Hartig, K., Soto, J., Weber, C.: ACSL By Example, Towards a Verified C Standard Library,, (2010)
  7. 7.
    Correnson, L., Cuoq, P., Puccetti, A., Signoles, J.: Frama-C User Manual, Boron Release,, (2010)
  8. 8.
    Alt-Ergo Theorem Prover,
  9. 9.
    Barrett, C., Tinelli, C.: CVC3, In Proceedings of the 19th International Conference on Computer Aided Verification (CAV’07), Volume 4590 of Lecture Notes in Computer Science, pages 298-302, (2007)Google Scholar
  10. 10.
  11. 11.
    Dutertre, B., de Moura, L.: The YICES SMT Solver,
  12. 12.
    de Moura, L., Bjørner, N.: Z3: An Efficient SMT Solver, Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS), Budapest, Hungary,, (2008)

Copyright information

© Springer-Verlag Berlin Heidelberg 2011

Authors and Affiliations

  • Kerstin Hartig
    • 1
  • Jens Gerlach
    • 1
  • Juan Soto
    • 1
  • Jürgen Busse
    • 2
  1. 1.Fraunhofer FIRSTBerlinGermany
  2. 2.Institute of Railway Technology, IfB GmbHBerlinGermany

Personalised recommendations