Rockwell Collins and Formal Methods September 20, 2013

© Copyright 2013 Rockwell Collins All rights reserved.

Company Official and Proprietary

Who we are:

An innovator in the design, production and support of aerospace and defense solutions Insert pictures into these angled boxes. Height should be 3.44 inches.

• A global company operating from more than 60 locations in 27 countries • 20,000 employees with 4700 engineers • A balanced business across markets: Government 58%, Commercial 42% • $4.7 billion in sales (2012)

Our core competencies include . . .

Communication/Navigation Situational Awareness Flight Control Simulation Information Electronic Warfare Management Rockwell Collins demonstrates a commitment to innovation with 9 % of sales as IR&D investment: Double the industry average © Copyright 2013 Rockwell Collins All rights reserved.

Company Official and Proprietary 2

Rockwell Collins

Aviation Electronics and Airborne / Mobile Communications Systems for Commercial and Military Applications Worldwide

© Copyright 2013 Rockwell Collins All rights reserved.

Company Official and Proprietary 3

Advanced Technology Center

Charter: Identify, Develop and Mature Technologies that Provide Growth for Rockwell Collins Support Business Units in Evaluation of Advanced Technology Partner with Companies and Universities for Advanced Research Key Technology Areas:

Formal Methods Networked Communication Systems Radio and Optical Systems Navigation and Control Avionics & Cabin Systems Information Assurance Automated Analysis Info & Computing Systems Modeling and Simulation

© Copyright 2013 Rockwell Collins All rights reserved.

Company Official and Proprietary 4

Trusted Systems

• 18 Research Engineers • Technical Expertise – Cyber • Defense • Operations – Information Assurance • Encryption • Data Separation • Data Security – Formal Methods • Thoerem Proving • Model Checking • Symbolic Execution E5 23% MS 35%

Education

BS 18% PhD 47%

E Grade

E6 18% E3 12% E4 47% © Copyright 2013 Rockwell Collins All rights reserved.

Company Official and Proprietary 5

Technology Progression in Avionics Technology

Avionics Electromechanical and Pneumatic Instruments Federated Electronics Networked Avionics Technology Pneumatic Electromechanical

1930-1960 © 2013 Rockwell Collins, All rights reserved.

Analog

1970-2010

Digital Optical Networking

2010+ Slide 6

© 2013 Rockwell Collins, All rights reserved.

Software Complexity Explosion!

Our customers have recognized this problem and are sounding the alarm!

Slide 7

Utility of Formal Methods

• Ex post facto verification – Has been used to meet certification requirements • Common Criteria EAL 6+ – Finds subtle errors • Early detection of errors – Allows errors to be addressed early in design process – Less rework -> lower costs • Increase of automation – Push button implementation, testing, and verification – Remove humans from tedious, error prone activities © 2013 Rockwell Collins All rights reserved.

Rockwell Collins Proprietary Information 8

1992 1994 1996 AAMP5 Microcode Verification (PVS) AAMP-FV Microcode Verification (PVS) AAMP5 Partitioning (PVS) 1998 FGS Mode Confusion Study (PVS) 2000 2002 2004 NASA Aviation Safety FGS Safety Analysis (RSML -e , NuSMV) FGS Mode Confusion PVS) ADGS 2100 (Simulink, NuSMV) JEM Java μProc (PVS) FCP 2002 Microcode (ACL2) AAMP7 Separation Kernel (ACL2) CerTA FCS (NuSMV, Prover) AFRL Greenhills Integrity RTOS (ACL2) vFaat (ACL2, PVS) 2006 2008 2010 AF Crypto Mod Crypto Control (Prover) DataFlow Logic ( ACL2 ) Mixed Crit. Architectures NSA 2012 FM Application (Kind) SHADE (ACL2) Turnstile (SPARK) Guardol (ACL2, Prover) Guardol App (ACL2, Prover)

© 2013 Rockwell Collins All rights reserved.

Rockwell Collins Proprietary Information

Cyber Seedling (ACL2) DARPA System Arch Tools (AADL) META (AADL) AVM (AADL)

FY 13 Formal Methods Projects

Customer

DARPA DARPA DARPA NASA AFRL NASA AFRL CPSD SPAWAR Internal NSA

Program(complete)

C2M2L (FY13) HACMS (FY17) Rapid (FY16) AFCS (FY16) SwPI (FY15) FCSR (FY13) CertaAMOR (ongoing) PikeWerks (FY13) DornerWorks (FY14) Auto Test (FY13) Guardol (FY14) Compositional reasoning DO-178C formal methods guidebook example Requirements modeling and analysis Data flow analysis Software cost reduction Robust firewall / guard © 2013 Rockwell Collins All rights reserved.

Rockwell Collins Proprietary Information 10

Potential Formal Methods Application Areas

• Cyber – Vulnerability analysis – Cyber resilient design – Demonstrate salient properties of cyber payloads • Unmanned Systems – Design, V&V of adaptive/autonomous behavior • Rapid Capability Deployment – Insertion of new technology/capability into fielded high assurance systems © 2013 Rockwell Collins All rights reserved.

Rockwell Collins Proprietary Information 11

Contact Information

• Corporate Web Site – www.rockwellcollins.com

– www.rockwellcollins.com/Careers.aspx

• Formal Specification and Analysis Job Posting – https://rockwellcollins.taleo.net/careersection/jobdetail.ftl?job=577014 • Ray Richards – [email protected]

– 319 295 6709 © 2013 Rockwell Collins All rights reserved.

Rockwell Collins Proprietary Information 12