Hasso-Plattner-Institut25 Jahre HPI
Hasso-Plattner-Institut25 Jahre HPI

Software Engineering for Embedded Systems (Wintersemester 2007/2008)

Dozent: Prof. Dr. Holger Giese (Systemanalyse und Modellierung)

Allgemeine Information

  • Semesterwochenstunden: 4
  • ECTS: 6
  • Benotet: Ja
  • Einschreibefrist: 15.11.2007
  • Lehrform:
  • Belegungsart: Wahlpflichtmodul


  • IT-Systems Engineering MA


Software-intensive systems, in which a considerable fraction of the system development efforts is dedicated to the development of embedded software, are often regarded as the most important software engineering field in the years to come. They are expected to be one key factor of success for many industries such as, for example, the automotive sector, transportation, or medical devices. As today technical systems also become connected to each other using network technology, we no longer only have technical systems which are controlled by isolated operating embedded software. Instead, the software may include complex information processing capabilities and the coordination between the different technical systems via networks taking hard real-time constraints into account.

Modeling embedded systems often results in a mix of models from a multitude of disciplines such as software engineering, control engineering, mechanical engineering, and electrical engineering. Block diagrams in systems engineering and the Unified Modeling Language (UML) in software engineering, are prominent examples of domain specific modeling techniques used for modeling. Recently, several steps towards integrating both worlds can be observed. UML 2.0 component diagrams offer a system view which has been originally invented for complex real-time systems in the telecommunications domain. SysML suggests an extension of the UML for systems engineering. The required integration has to combine the usually continuous world considered by systems engineering and the discrete software engineering view and thus results in techniques for hybrid systems which support both continuous as well as discrete behavior.

Embedded systems are often safety-critical applications where their correct operation is vital to ensure the safety of the public and environment. Examples include shut-down systems for nuclear power plants, fly-by-wire aircrafts, autonomous train control software or anti-lock braking systems in automobiles. Safety is a system property and thus cannot be studied by simply taking into account the software part of an embedded system, only. However, in this lecture we will address the general engineering aspects of safety in a rather superficial manner and mainly concentrate on the specific problems of safety-critical systems which contain (complex) software parts.

In this lecture, we will review the current state of the art of software engineering for embedded systems taking into account the techniques available for the different development activities such as project management, requirements engineering, analysis & design, implementation, and verification & validation. This will, in particular, include the study of available techniques for the development of systems which are safety-critical, have hard real-time constraints, and are hybrid systems. Also an overview about the current state of the art for the model-driven development of embedded systems is provided.


The slides for the lectures will be published on the internal directory of the lecture.

In addition, the following books, articles and reports are recommended:

[1] L. Carloni, M. D. D. Benedetto, R. Passerone, A. Pinto, and A. Sangiovanni-Vincentelli. Modeling Techniques, Programming Languages and Design Toolsets for Hybrid Systems. Project IST-2001-38314 COLUMBUS - Design of Embedded Controllers for Safety Critical Systems, WPHS: Hybrid System Modeling, July 2004. Version: 0.2, Deliverable number: DHS4-5-6.

[2] D. Henriksson, O. Redell, J. El-Khoury, M. Törngren, and K.-E. Arzen. Tools for Real-Time Control Systems Co-Design - A Survey. Technical Report ISRNLUTFD2/TFRT--7612--SE, Department of Automatic Control, Lund Institute of Technology, Sweden, April 2005.

[3] J. C. Laprie, editor. Dependability : basic concepts and terminology in English, French, German, Italian and Japanese [IFIP WG 10.4, Dependable Computing and Fault Tolerance], volume 5 of Dependable computing and fault tolerant systems. Springer Verlag, Wien, 1992.

[4] Nancy G. Leveson. Safeware: system safety and computers. Addison-Wesley, 1995.

[5] P. Liggesmeyer and D. Rombach, eds., Software Engineering eingebetteter Systeme: Grundlagen - Methodik - Anwendungen. Elsevier, 2005. (UPB Bib: TWQ 11163 +1)

[6] Peter G. Neumann. Computer related risks. ACM Press, 1995.

[7] Object Management Group. Systems Modeling Language (SysML) Specification, January 2005. Document: ad/05-01-03.

[8] Object Management Group. UML for System Engineering Request for Proposal, ad/03-03-41, March 2003.

[9] Object Management Group. UML 2.0 Superstructure Specification, October 2004. Document: ptc/04-10-02 (convenience document).

[10] T. Samad and G. Balas, eds., Software-Enabled Control: Information Technology for Dynamical Systems. IEEE Press and Wiley-Interscience, 2003.

[11] N. Storey. Safety-Critical Computer Systems. Addison-Wesley, 1996.

Lern- und Lehrformen

Es finden zwei 90-minütige Vorlesungen pro Woche statt. Die Vorlesung wird ca. alle zwei Wochen einen Übungsblock beinhalten, in dem die Lösungen für die ca. 2 Wochen vorher gestellten Übungsblättern vorgeführt werden sollen.


Zur Leistungsbewertung wird ausschließlich eine abschließende mündliche Prüfung herangezogen. Die Termine für die mündliche Prüfung finden nach Vereinbarung statt.


Vorlesung (mit integrierter Übung):

  • Beginn: 22.10.2007
  • Montag 13:30Uhr - 15:00Uhr im Hörsaal 3
  • Dienstag 13:30Uhr - 15:00Uhr im Hörsaal 3

Eingeladener Vortrag:

  • Fr, 08.02.08 15.00 Uhr - 19.00 Uhr im Hörsaal 3

Traps and Pitfalls in Model-based Development: How-to Improve the Quality of Models Used for Generating Embedded Automotive Controller Software

Ingo Stürmer, Model Engineering Solutions, Berlin, Germany


Model-based development and automatic code generation have become an established approach in embedded software development for the automotiveindustrie. The use of a code generator can lead to significant improvementsin productivity in the software implementation phase. Moreover, earlyquality assurance at the model level can lead to a higher level of codequality. However, automotive software is very often deployed in safety-critical systems and as a result, may not contain errors. In this context it is crucial that the use of a code generator and its tool chain(editor, compiler, linker, loader, etc.) does not incorporate errors in thetarget system and leave them undetected. In general, this cannot be fully avoided even when using a code generator proven to be`correct-by-construction´. Inappropriate modeling or the faulty configuration of the code generator could, for example, lead to erroneous generated code.

The presentation shows how code generators and generated code can be safeguarded by means of constructive as well as analytical quality assurance methods. Specific, tool-related problems will be discussed and illustrated with practice-relevant examples; possible solutions for safeguarding model-based code generators will be presented.

About the presenter:

Ingo Stürmer is founder and principal consultant of Model Engineering Solutions, a consultancy company based in Berlin, Germany, which provides best of practice techniques and methods in the field of model-based code generation for embedded systems. Ingo worked as a PhD student at DaimlerChrysler Research and Technology and as a researcher at the Fraunhofer Institute for Computer Architecture and Software Technology (FIRST). Ingo is a member of the MISRA Autocode Working Group, member of the ACM (SIGSOFT), and GI (German Society for Computer Science).

Extra Termine:

  • Mo, 10.12.07 17.00 Uhr - 18.30 Uhr im Hörsaal 3
  • Fr, 14.12.07 15.00 Uhr - 19.00 Uhr im Hörsaal 3
  • Mo, 28.01.08 17.00 Uhr - 18.30 Uhr im Hörsaal 3
  • Fr, 01.02.08 15.00 Uhr - 19.00 Uhr im Hörsaal 3
  • Fr, 08.02.08 15.00 Uhr - 19.00 Uhr im Hörsaal 3

Termine die ausfallen:

Die folgenden Vorlesungen finden nicht statt und werden entsprechend nachgeholt (siehe extra Termine).

  • Mo, 3.12.07 13.30 Uhr - 15.00 Uhr im Hörsaal 3
  • Mo, 14.01.08 13.30 Uhr - 15.00 Uhr im Hörsaal 3
  • Di, 15.01.08 13.30 Uhr - 15.00 Uhr im Hörsaal 3