Overview

In the provided evidence, DO-178 is discussed as an avionics certification context for the software layer. The cited case study contrasts this software-layer certification concern with the hardware layer, where avionics certification is associated with DO-254, and argues that validation techniques are needed to bridge the gap between the two layers.

Role in software–hardware certification boundaries

The evidence frames DO-178 as part of a certification boundary problem in embedded avionics systems. Software may require certification according to DO-178, while hardware may require certification according to DO-254. The authors describe a need for validation methods that connect these layers, particularly as embedded systems increasingly combine hardware and software components for safety-critical functionality such as fly-by-wire.

Certification kits and processor conformance testing

The cited case study discusses certification kits: sets of test cases or test programs used to support certification processes. It notes that such kits are often developed manually and that selling manually developed certification kits is a business in domains including avionics certification according to DO-178.

The work proposes model-based generation of test programs as a basis for certification kits. Its example uses a formal processor model to generate tests that check whether hardware conforms to the model. This is presented as useful where processor implementation details are unavailable, such as with commercial off-the-shelf processors, and where system builders need evidence that tools and hardware are being applied according to their specifications.

Relevance to COTS processors

The evidence specifically links these certification-support activities to commercial off-the-shelf processors. It states that assembly-level models are important because this is often the level of detail available for COTS processors and because it is the target level of high-level compilers. The authors argue that their approach can support certification of COTS processors when manufacturers are unwilling either to certify the processor themselves or to disclose internal implementation details.

Key points

• DO-178 is cited as an avionics certification context for the software layer.
• The evidence contrasts DO-178 software concerns with DO-254 hardware concerns.
• Certification kits are described as sets of test cases used in certification processes and are often manually developed.
• Model-based test generation is presented as a way to produce test programs that can support certification evidence, especially for COTS processors and processor-conformance checks.