Upload
janos-kovacs
View
216
Download
0
Embed Size (px)
Citation preview
8/20/2019 Qualkitdo Slvnv Tor
1/41
DO Qualification Kit
Simulink® Verification and Validation™ Tool Operational Requirements
R2015b, September 2015
8/20/2019 Qualkitdo Slvnv Tor
2/41
How to Contact MathWorks
Latest news: www.mathworks.com
Sales and services: www.mathworks.com/sales_and_services
User community: www.mathworks.com/matlabcentral
Technical support: www.mathworks.com/support/contact_us
Phone: 508-647-7000
The MathWorks, Inc.3 Apple Hill Drive
Natick, MA 01760-2098
DO Qualification Kit: Simulink ® Verification and Validation™ Tool Operational Requirements
© COPYRIGHT 2009 – 2015 by The MathWorks, Inc.
The software described in this document is furnished under a license agreement. The software may be used or copied only under
the terms of the license agreement. No part of this manual may be photocopied or reproduced in any form without prior writtenconsent from The MathWorks, Inc.
FEDERAL ACQUISITION: This provision applies to all acquisitions of the Program and Documentation by, for, or through the
federal government of the United States. By accepting delivery of the Program or Documentation, the government hereby agrees
that this software or documentation qualifies as commercial computer software or commercial computer software documentationas such terms are used or defined in FAR 12.212, DFARS Part 227.72, and DFARS 252.227-7014. Accordingly, the terms and
conditions of this Agreement and only those rights specified in this Agreement, shall pertain to and govern the use, modification,reproduction, release, performance, display, and disclosure of the Program and Documentation by the federal government (or
other entity acquiring for or through the federal government)and shall supersede any conflicting contractual terms or conditi ons.
If this License fails to meet the government’s needs or is inconsistent in any respect with federal procurement law, thegovernment agrees to return the Program and Documentation, unused, to The MathWorks, Inc.
Trademarks
MATLAB and Simulink are registered trademarks of The MathWorks, Inc. See www.mathworks.com/trademarks f or a
list of additional trademarks. Other product or brand names may be trademarks or registered trademarks of their respectiveholders.
Patents
MathWorks products are protected by one or more U.S. patents. Please see www.mathworks.com/patents f or moreinformation.
http://www.mathworks.com/http://www.mathworks.com/http://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/matlabcentral/http://www.mathworks.com/matlabcentral/http://www.mathworks.com/support/contact_us/http://www.mathworks.com/support/contact_us/http://www.mathworks.com/trademarkshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/patentshttp://www.mathworks.com/trademarkshttp://www.mathworks.com/support/contact_us/http://www.mathworks.com/matlabcentral/http://www.mathworks.com/sales_and_serviceshttp://www.mathworks.com/
8/20/2019 Qualkitdo Slvnv Tor
3/41
Revision History
March 2009 New for Version 1.0 (Applies to Release 2009a)
September 2009 Revised for Version 1.1 (Applies to Release 2009b)April 2010 Rereleased for Version 1.1.1 (Applies to Release 2009bSP1)
March 2010 Revised for Version 1.2 (Applies to Release 2010a)
September 2010 Revised for Version 1.3 (Applies to Release 2010b)April 2011 Revised for Version 1.4 (Applies to Release 2011a)
September 2011 Revised for Version 1.5 (Applies to Release 2011b)
March 2012 Revised for Version 1.6 (Applies to Release 2012a)September 2012 Revised for Version 2.0 (Applies to Release 2012b)
March 2013 Revised for Version 2.1 (Applies to Release 2013a)
September 2013 Revised for Version 2.2 (Applies to Release 2013b)
March 2014 Revised for Version 2.3 (Applies to Release 2014a)
October 2014 Revised for Version 2.4 (Applies to Release 2014b)March 2015 Revised for Version 2.5 (Applies to Release 2015a)September 2015 Revised for DO Qualification Kit Version 3.0 (Applies to Release 2015b)
8/20/2019 Qualkitdo Slvnv Tor
4/41
8/20/2019 Qualkitdo Slvnv Tor
5/41
v
Contents
1
Introduction ...................................................................................................................................... 1-1
1.1 Simulink Verification and Validation Product Description ..................................................... 1-2
2 Operational Requirements ................................................................................................................ 2-1
2.1 DO-178C/DO-331 Checks Operational Requirements ........................................................... 2-2
2.2 DO-178C/DO-331 Checks and Model Advisor User Information ........................................ 2-19 2.3 Model Coverage Operational Requirements ......................................................................... 2-20
2.4 Model Coverage User Information ........................................................................................ 2-30
3 Installation ........................................................................................................................................ 3-1
4
Operational Environment ................................................................................................................. 4-1
8/20/2019 Qualkitdo Slvnv Tor
6/41
vi
8/20/2019 Qualkitdo Slvnv Tor
7/41
1 Introduction
This document comprises the Tool Operational Requirements (reference DO-330 Section
10.3.1) for the following capabilities of the Simulink ® Verification and Validation™ verification product:
DO-178C/DO-331 checks Model coverage
The document identifies:
Features of the Simulink Verification and Validation product.
The environment in which the Simulink Verification and Validation product is installed(reference DO-330, Sections 10.2.4 and 10.3.2).
This document is intended for use in the DO-330 tool qualification process for TQL-5 tools. The
applicant needs to:
Review the Tool Operational Requirements for applicability in the project or programunder consideration.
Configure the Tool Operational Requirements in the project or program’s configurationmanagement system.
Complete the Tool Operational Requirements and make the document available for review.
See documentation for the following products at the MathWorks® Documentation Center,
R2015b:
DO Qualification Kit (for DO-178)
Simulink Verification and Validation
Simulink ®
Stateflow®
http://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.html
8/20/2019 Qualkitdo Slvnv Tor
8/41
1-2
1.1 Simulink Verification and Validation ProductDescriptionVerify models and generated code
Simulink Verification and Validation automates requirements tracing, modeling standards
compliance checking, and model coverage analysis.
You can create detailed requirements traceability reports, author your own modeling stylechecks, and develop check configurations to share with engineering teams. Requirementsdocumentation can be linked to models, test cases, and generated code. You can generate
harness models for testing model components and code, and use model coverage analysis toensure that models have been thoroughly tested.
Simulink Verification and Validation provides modeling standards checks for the DO-178, ISO
26262, IEC 61508 and related industry standards.
Key Features
Compliance checking for MAAB style guidelines and high-integrity system design
guidelines (DO-178, ISO 26262, IEC-61508, and related industry standards) Model Advisor Configuration Editor, including custom check authoring
Requirements Management Interface for traceability of model objects, code, and tests torequirements documents
Automatic test-harness generation for subsystems
Component testing via simulation, software-in-the-loop (SIL), and processor-in-the-loop(PIL)
Programmable scripting interface for automating compliance checking, requirements
traceability analysis, and component testing
8/20/2019 Qualkitdo Slvnv Tor
9/41
2 Operational Requirements
8/20/2019 Qualkitdo Slvnv Tor
10/41
2-2
2.1 DO-178C/DO-331 Checks OperationalRequirementsThe Simulink Verification and Validation product includes the Model Advisor
DO-178C/DO-331 modeling standards checks, which help you define and implement consistentdesign guidelines. These guidelines can be applied across projects and development teams. TheModel Advisor finds unwanted model properties, such as incorrect or deprecated blocks and
block parameters, incorrect fonts, and misplaced objects.
Types of checks include:
Block parameter settings
Model configuration parameter settings
Code generator settings
Production hardware parameter settings
Simulink and Stateflow diagnostic parameter settings
Model connections
Compatibility of reference models, libraries and S-functions
Model style considerations
Requirement management interface consistency
The purpose of this capability is to verify that Simulink and Stateflow models comply with
modeling standards, and to verify that the code generator settings are set properly to provide
traceable code that complies with standards.
You can find the DO-178C/DO-331 checks in the Model Advisor > By Product > SimulinkVerification and Validation > Modeling Standards > DO-178C/DO-331 Checks subfolder.
8/20/2019 Qualkitdo Slvnv Tor
11/41
2-3
The following table lists the Simulink Verification and Validation DO-178C/DO-331 checks
that are provided with the DO Qualification Kit, along with the corresponding DO-331 section
to which each check applies. The user is responsible for ensuring that the tool features they rely
on to eliminate, reduce or automate the process are sufficiently covered by Tool OperationalRequirements (reference DO-300 Section 6.2.1.aa).
Note The DO-178C/DO-331 checks can contain two sections: an analysis sectionfor reviewing the model and an action section for automatically fixing warningsand failures. The DO Qualification Kit covers the DO-178C/DO-331 checkanalysis, not the check actions.
The DO Qualification Kit does not cover Model Advisor check exclusions.
DO-178C/DO-331 Checks— Operational Requirements Summary
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related optimization
settings
mathworks.do178.OptionSet
DO178C_01 Simulink Verification and
Validation shall verify that themodel optimization
configuration parameterscomply with the Modeling
Guidelines for High-Integrity
Systems, R2015b.
For details, refer to “Check
safety-related optimizationsettings” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-level
requirements conform tostandards
MB.6.3.1.g Algorithms areaccurate
MB.6.3.2.g Algorithms are
accurate
MB.6.3.3.b Software
architecture is consistent
MB.6.3.4.e Source code is
traceable to low-levelrequirements
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
12/41
2-4
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnosticsettings for solvers
mathworks.do178.SolverDiagnost
icsSet
DO178C_02 Simulink Verification andValidation shall verify that themodel diagnostic configuration parameters pertaining to solvers
comply with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, refer to “Checksafety-related diagnostic settings
for solvers” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.3.b Softwarearchitecture is consistent
MB.6.3.3.e Softwarearchitecture conforms tostandards
Check safety-related diagnostic
settings for sample time
mathworks.do178.SampleTimeDiagnosticsSet
DO178C_03 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to sampletime comply with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, see “Check safety-
related diagnostic settings for
sample time” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Softwarearchitecture conforms tostandards
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
13/41
2-5
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnosticsettings for signal data
mathworks.do178.DataValiditySi
gnalsDiagnosticsSet
DO178C_04 Simulink Verification andValidation shall verify that themodel diagnostic configuration parameters pertaining to signal
data comply with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
signal data” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.e High-levelrequirements conform tostandards
MB.6.3.2.e Low-levelrequirements conform to
standards
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurateMB.6.3.3.b Software
architecture is consistent
Check safety-related diagnostic
settings for parameters
mathworks.do178.DataValidityPar amDiagnosticsSet
DO178C_05 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to
parameters comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
parameters” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms areaccurate
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
14/41
2-6
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnostic
settings for data used fordebugging
mathworks.do178.DataValidityDebugDiagnosticsSet
DO178C_06 Simulink Verification and
Validation shall verify that themodel diagnostic configuration parameters pertaining to
debugging comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
data used for debugging” inSimulink Verification and
Validation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-levelrequirements conform to
standards
Check safety-related diagnostic
settings for data store memory
mathworks.do178.DataStoreMemoryDiagnosticsSet
DO178C_07 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to data
store memory comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
data store memory” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User Information.
MB.6.3.3.b Software
architecture is consistent
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
15/41
2-7
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnostic
settings for type conversions
mathworks.do178.TypeConversio
nDiagnosticsSet
DO178C_08 Simulink Verification and
Validation shall verify that themodel diagnostic configuration parameters pertaining to type
conversions comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
type conversions” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms areaccurate
Check safety-related diagnostic
settings for signal connectivity
mathworks.do178.ConnectivitySignalsDiagnosticsSet
DO178C_09 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to type
conversions comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
signal connectivity” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User Information.
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-level
requirements conform tostandards
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
16/41
2-8
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnostic
settings for bus connectivity
mathworks.do178.ConnectivityB
ussesDiagnosticsSet
DO178C_10 Simulink Verification and
Validation shall verify that themodel diagnostic configuration parameters pertaining to bus
connectivity comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
bus connectivity” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistent
Check safety-related diagnostic
settings that apply to function-callconnectivity
mathworks.do178.FcnCallDiagnosticsSet
DO178C_11 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to
function-call connectivitycomply with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, see “Check safety-
related diagnostic settings thatapply to function-callconnectivity” in Simulink
Verification and Validation DO-178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistent
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
17/41
2-9
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnostic
settings for compatibility
mathworks.do178.Compatability
DiagnosticsSet
DO178C_12 Simulink Verification and
Validation shall verify that themodel diagnostic configuration parameters pertaining to
compatibility comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
compatibility” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistent
Check safety-related diagnostic
settings for model referencing
mathworks.do178.MdlRefDiagnosticsSet
DO178C_13 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to model
referencing comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
model referencing” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User Information.
MB.6.3.1.d High-level
requirements are verifiable
MB.6.3.2.d Low-levelrequirements are verifiable
MB.6.3.3.b Softwarearchitecture is consistent
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
18/41
2-10
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related model
referencing settings
mathworks.do178.MdlRefOptSet
DO178C_14 Simulink Verification and
Validation shall verify that themodel configuration parametersfor model referencing are set to
generate code for a safety-related application.
For details, see “Check safety-
related model referencingsettings” in Simulink
Verification and Validation DO-178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.b High-level
requirements are accurate andconsistent
MB.6.3.2.b Low-levelrequirements are accurate and
consistent
MB.6.3.3.b Software
architecture is consistent
Check safety-related code
generation settings
mathworks.do178.CodeSet
DO178C_15 Simulink Verification and
Validation shall verify that themodel configuration parametersfor code generation comply with
the Modeling Guidelines for
High-Integrity Systems, R2015b.
For details, see “Check safety-
related code generation settings”in Simulink Verification andValidation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.1.c High-level
requirements are compatiblewith target computer
MB.6.3.2.c Low-levelrequirements are compatible
with target computer
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-level
requirements conform to
standards
MB.6.3.4.e Source code istraceable to low-level
requirements
Display model version
information
mathworks.do178.MdlChecksum
DO178C_16 Simulink Verification and
Validation shall verify that the
report displays model versioninformation.
For details, see “Display model
version information” in Simulink
Verification and Validation DO-178C/DO-331 Checks and
Model Advisor User
Information.
Not Applicable (for
documentation only)
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
19/41
2-11
Check TitleCheck ID
RequirementID
Description DO-331 References
Check safety-related diagnostic
settings for saving
mathworks.do178.SavingDiagnos
ticsSet
DO178C_17 Simulink Verification and
Validation shall verify that themodel configuration parameterson the Diagnostics > Saving
pane are set for a safety-relatedapplication.
For details, see “Check safety-
related diagnostic settings forsaving” in Simulink Verification
and Validation DO-178C/DO-331 Checks and Model Advisor
User Information.
MB.6.3.3.b Software
architecture is consistent
Check for blocks that do not link
to requirements
mathworks.do178.RequirementIn
fo
DO178C_18 Simulink Verification and
Validation shall verify that themodel blocks and objects link torequirements document.
For details, see “Check for blocks that do not link torequirements” in Simulink
Verification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.f High-level
requirements trace to systemrequirements
MB.6.3.2.f Low-level
requirements trace to high-level requirements
Check safety-related diagnostic
settings for model initialization
mathworks.do178.InitDiagnosticsSet
DO178C_19 Simulink Verification and
Validation shall verify that themodel diagnostic configuration
parameters pertaining to
initialization are set according tothe Modeling Guidelines for High-Integrity Systems, R2015b.
For details, see “Check safety-related diagnostic settings for
model initialization” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistent
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
20/41
2-12
Check TitleCheck ID
RequirementID
Description DO-331 References
Check state machine type of
Stateflow charts
mathworks.do178.hisf_0001
DO178C_20 Simulink Verification and
Validation shall verify that statemachine types comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check state
machine type of Stateflowcharts” in Simulink Verificationand Validation DO-178C/DO-
331 Checks and Model AdvisorUser Information.
MB.6.3.1.b High-level
requirements are accurate andconsistent
MB.6.3.1.e High-levelrequirements conform to
standards
MB.6.3.2.b Low-level
requirements are accurate andconsistent
MB.6.3.2.e Low-levelrequirements conform tostandards
MB.6.3.3.b Software
architecture is consistent
MB.6.3.3.e Software
architecture conforms to
standards
Check Stateflow charts for
ordering of states and transitions
mathworks.do178.hisf_0002
DO178C_21 Simulink Verification and
Validation shall verify that chartstate/transition execution ordercomplies with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, see “Check
Stateflow charts for ordering of
states and transitions” in
Simulink Verification andValidation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.3.b Software
architecture is consistentMB.6.3.3.e Software
architecture conforms tostandards
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
21/41
2-13
Check TitleCheck ID
RequirementID
Description DO-331 References
Check Stateflow debugging
options
mathworks.do178.hisf_0011
DO178C_22 Simulink Verification and
Validation shall verify that theStateflow debugging optionscomply with the Modeling
Guidelines for High-Integrity
Systems, R2015b.
For details, see “Check
Stateflow debugging options” inSimulink Verification and
Validation DO-178C/DO-331Checks and Model Advisor User
Information.
MB.6.3.1.b High-level
requirements are accurate andconsistent
MB.6.3.1.e High-levelrequirements conform to
standards
MB.6.3.2.b Low-level
requirements are accurate andconsistent
MB.6.3.2.e Low-levelrequirements conform tostandards
Check usage of lookup table
blocks
mathworks.do178.LUTRangeChe
ckCode
DO178C_23 Simulink Verification and
Validation shall verify thatlookup table blocks areconfigured to generate out-of-range checking code.
For details, see “Check usage oflookup table blocks” in Simulink
Verification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
Check Stateflow charts for
uniquely defined data objects
mathworks.do178.hisl_0061
DO178C_24 Simulink Verification and
Validation shall verify thatStateflow charts using data
objects comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “CheckStateflow charts for uniquelydefined data objects” inSimulink Verification and
Validation DO-178C/DO-331
Checks and Model Advisor User Information.
MB.6.3.2.b Accuracy and
Consistency of Low-LevelRequirement
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
22/41
2-14
Check TitleCheck ID
RequirementID
Description DO-331 References
Check usage of Math Operations
blocks
mathworks.do178.MathOperation
sBlocksUsage
DO178C_25 Simulink Verification and
Validation shall verify that mathoperations blocks comply withthe Modeling Guidelines for
High-Integrity Systems, R2015b.
For details, see “Check usage of
Math Operations blocks” inSimulink Verification and
Validation DO-178C/DO-331
Checks and Model Advisor User Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms areaccurate
Check usage of Signal Routing
blocks
mathworks.do178.SignalRoutingBlockUsage
DO178C_26 Simulink Verification and
Validation shall verify that
Signal Routing blocks complywith the Modeling Guidelines for High-Integrity Systems, R2015b.
For details, see “Check usage ofSignal Routing blocks” in
Simulink Verification and
Validation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms are
accurate
Check usage of Logic and Bit
Operations blocks
mathworks.do178.LogicBlockUsage
DO178C_27 Simulink Verification and
Validation shall verify thatLogic and Bit Operations blocks
comply with the ModelingGuidelines for High-Integrity
Systems, R2015b.
For details, see “Check usage ofLogic and Bit Operations blocks” in Simulink Verification
and Validation DO-178C/DO-
331 Checks and Model Advisor
User Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms areaccurate
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
23/41
2-15
Check TitleCheck ID
RequirementID
Description DO-331 References
Check usage of Ports and
Subsystems blocks
mathworks.do178.PortsSubsyste
msUsage
DO178C_28 Simulink Verification and
Validation shall verify that Portsand Subsystems blocks complywith the Modeling Guidelines
for High-Integrity Systems, R2015b.
For details, see “Check usage of
Ports and Subsystems blocks” inSimulink Verification and
Validation DO-178C/DO-331Checks and Model Advisor User
Information.
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-levelrequirements conform to
standards
Check for inconsistent vector
indexing methods
mathworks.do178.hisl_0021
DO178C_29 Simulink Verification and
Validation shall verify that thevector indexing methods complywith the Modeling Guidelines for High-Integrity Systems,
R2015b.
For details, see “Check for
inconsistent vector indexingmethods” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.2.b Accuracy and
Consistency of Low-LevelRequirements
Check for blocks not
recommended for C/C++ production code deployment
mathworks.do178.PCGSupport
DO178C_30 Simulink Verification and
Validation shall identify blocksnot supported by codegeneration or not recommendedfor C/C++ production code
deployment.
For details, see “Check for
blocks not recommended forC/C++ production code
deployment” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.2.b Accuracy and
Consistency of Low-LevelRequirements
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
24/41
2-16
Check TitleCheck ID
RequirementID
Description DO-331 References
Check for MATLAB Function
interfaces with inherited properties
mathworks.do178.himl_0002
DO178C_31 Simulink Verification and
Validation shall verify thatMATLAB Functions complywith the Modeling Guidelines
for High-Integrity Systems, R2015b.
For details, see “Check for
MATLAB Function interfaceswith inherited properties” in
Simulink Verification andValidation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.2.b Accuracy and
Consistency of Low-LevelRequirements
Check for MATLAB Function
metrics
mathworks.do178.himl_0003
DO178C_32 Simulink Verification and
Validation shall verify thatcomplexity and code metrics forMATLAB functions comply
with the Modeling Guidelines
for High-Integrity Systems, R2015b.
For details, see “Check forMATLAB Function metrics” inSimulink Verification and
Validation DO-178C/DO-331
Checks and Model Advisor User
Information.
MB.6.3.1.e High-level
requirements conform tostandards
MB.6.3.2.e Low-levelrequirements conform to
standards
http://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
25/41
2-17
Check TitleCheck ID
RequirementID
Description DO-331 References
Check MATLAB Code Analyzer
messages
mathworks.do178.himl_0004
DO178C_33 Simulink Verification and
Validation shall verify thatMATLAB Functions for
%#codegen directive,MATLAB Code Analyzermessages, and justificationmessage IDs comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “CheckMATLAB Code Analyzer
messages” in Simulink
Verification and Validation DO-
178C/DO-331 Checks and
Model Advisor User
Information.
MB.6.3.1.g Algorithms are
accurate
MB.6.3.2.g Algorithms areaccurate
Check MATLAB code for global
variables
mathworks.do178.himl_0005
DO178C_34 Simulink Verification and
Validation shall verify that
global variables comply with the Modeling Guidelines for High-
Integrity Systems, R2015b.
For details, see “Check
MATLAB code for globalvariables” in SimulinkVerification and Validation DO-
178C/DO-331 Checks and
Model Advisor User Information.
MB.6.3.3.b Software
architecture is consistent
http://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdfhttp://hhttp//www.mathworks.com/help/releases/R2015b/pdf_doc/simulink/hi_guidelines.pdf
8/20/2019 Qualkitdo Slvnv Tor
26/41
2-18
Check TitleCheck ID
RequirementID
Description DO-331 References
Check for variant blocks with
‘Generate preprocessorconditionals’ active
mathworks.do178.VariantBlock
DO178C_35 Simulink Verification and
Validation shall verify thatvariant blocks are notconfigured to generate pre-
processor conditionals.
For details, see “Check for
variant blocks with ‘Generate preprocessor conditionals’active” in Simulink Verification
and Validation DO-178C/DO-331 Checks and Model Advisor
User Information.
MB.6.3.4.e Source code is
traceable to low-levelrequirements
8/20/2019 Qualkitdo Slvnv Tor
27/41
2-19
2.2 DO-178C/DO-331 Checks and Model Advisor UserInformationThe Simulink ® Verification and Validation™ user information for the DO-178C/DO-331 checks
is in the Simulink Verification and Validation DO-178C/DO-331 Checks and Model AdvisorUser Information.
To access the user information document, on the MATLAB® command line, type qualkitdo to open the Artifacts Explorer. The document is in Simulink Verification and Validation.
8/20/2019 Qualkitdo Slvnv Tor
28/41
2-20
2.3 Model Coverage Operational RequirementsThe Simulink Verification and Validation product includes model coverage, which helps you
assess the extent to which test cases exercise the pathways through a model. Model coverageworks for Simulink blocks, including the MATLAB Function block, and Stateflow charts.
The following table lists the Simulink Verification and Validation model coverage capabilities
supported by the DO Qualification Kit. Also listed are the corresponding DO-178C or DO-331
(references that include MB prefix) section to which each capability applies. The user isresponsible for ensuring that the tool features they rely on to eliminate, reduce or automate the
process are sufficiently covered by Tool Operational Requirements (reference DO-300 Section
6.2.1.aa).
Model Coverage— Operational Requirements Summary
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Cumulative Coverage MC_SL_CUMC Simulink Verification and
Validation shall determine the
accumulated coverage resultsof model coverage analysis.
For details, see “Cumulative
Coverage” in SimulinkVerification and Validation
Model Coverage User
Information.
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.2.d Low-level requirements are
verifiable
MB.6.3.3.d Software architecture is
verifiable
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
Simulink Cyclomatic
ComplexityMC_SL_CYC Simulink Verification and
Validation shall determine thecyclomatic complexity of amodel.
For details, see “Cyclomatic
Complexity” in Simulink
Verification and Validation Model Coverage User
Information.
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.1.e High-level requirements
conform to standards
MB.6.3.2.d Low-level requirements areverifiable
MB.6.3.2.e Low-level requirements
conform to standardsMB.6.3.3.d Software architecture isverifiable
MB.6.3.3.e Software architecture
conforms to standards
8/20/2019 Qualkitdo Slvnv Tor
29/41
2-21
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Decision Coverage
(DC)
MC_SL_DC Simulink Verification and
Validation shall determine theDC of a model.
For details, see “DecisionCoverage (DC)” in Simulink
Verification and Validation
Model Coverage User
Information.
MB.6.3.1.d High-level requirements are
verifiable
Condition Coverage
(CC)MC_SL_CC Simulink Verification and
Validation shall determine theCC of a model.
For details, see “Condition
Coverage (CC)” in Simulink
Verification and Validation
Model Coverage User
Information.
Modified
Condition/Decision
Coverage (MC/DC)
MC_SL_MCDC Simulink Verification and
Validation shall determine the
MC/DC of a model.
For details, see “Modified
Condition/Decision Coverage(MCDC)” in SimulinkVerification and Validation
Model Coverage User Information.
MB.6.3.2.d Low-level requirements are
verifiable
MB.6.3.3.d Software architecture is
verifiable
MB.6.3.2.a Low-level requirements
comply with high-level requirements
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-level
requirements is achieved
Saturation on integer
overflow coverageMC_SATINT Simulink Verification and
Validation shall providesaturation on integer overflow
coverage.
For details, see “Saturation on
integer overflow coverage” in
Simulink Verification andValidation Model Coverage
User Information.
8/20/2019 Qualkitdo Slvnv Tor
30/41
2-22
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Lookup Table
Coverage (LUT)
MC_SL_LUT Simulink Verification and
Validation shall provide LUTcoverage.
For details, see “LookupTable Coverage” in Simulink
Verification and Validation
Model Coverage User
Information.
6.4.5 Test cases and procedures are
correct6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
Signal Range
Coverage
MC_SL_SR Simulink Verification and
Validation shall providesignal range coverage.
For details, see “Signal Range
Coverage” in SimulinkVerification and Validation
Model Coverage User
Information.
Signal Size Coverage MC_SL_SS Simulink Verification and
Validation shall provide
signal size coverage.
For details, see “Signal Size
Coverage” in Simulink
Verification and Validation
Model Coverage User
Information.Relational Boundary
Coverage
MC_SL_RELB
OUND
Simulink Verification and
Validation shall providerelational boundary coverage.
For details, see “RelationalBoundary Coverage” inSimulink Verification and
Validation Model Coverage
User Information.
MB.6.3.2.d Low-level requirements are
verifiable
MB.6.3.3.d Software architecture is
verifiable
6.4.5 Test cases and procedures arecorrect
6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
8/20/2019 Qualkitdo Slvnv Tor
31/41
2-23
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Abs block MC_SL_ABS Simulink Verification and
Validation shall provide DC,saturate on integer overflow,and relational boundary
coverage for the Abs block.*
MB.6.3.1.d High-level requirements are
verifiableMB.6.3.2.d Low-level requirements areverifiable
MB.6.3.3.d Software architecture isverifiable
MB.6.3.2.a Low-level requirements
comply with high-level requirements
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-level
requirements is achieved
6.4.4.1 Test coverage of low-level
requirements is achieved
Combinatorial Logic
block
MC_SL_COMB
LOGIC
Simulink Verification and
Validation shall provide DCand CC for the Combinatorial
Logic block.*
Dead Zone block MC_SL_DEAD Simulink Verification and
Validation shall provide DC,saturate on integer overflow,
and relational boundarycoverage for the Dead Zone block.*
Direct Lookup Table
(n-D) block
MC_SL_DLUT
ND
Simulink Verification and
Validation shall provide LUTcoverage for the DirectLookup Table (n-D) block.*
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-level
requirements is achieved
6.4.4.1 Test coverage of low-level
requirements is achieved
Discrete-Time
Integrator blockMC_SL_DINT Simulink Verification and
Validation shall provide DC
and saturate on integeroverflow coverage for theDiscrete-Time Integrator
block.*
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.2.d Low-level requirements areverifiable
MB.6.3.3.d Software architecture is
verifiable
MB.6.3.2.a Low-level requirementscomply with high-level requirements
6.4.5 Test cases and procedures arecorrect
6.4.4.1 Test coverage of high-levelrequirements is achieved
Enabled and Triggered
Subsystem block
MC_SL_ENTR
G
Simulink Verification and
Validation shall provide DC,
CC, and MCDC for the
Enabled and Triggered
Subsystem block.*
8/20/2019 Qualkitdo Slvnv Tor
32/41
2-24
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Enabled Subsystem
block
MC_SL_ENAB Simulink Verification and
Validation shall provide DC,CC, and MCDC for theEnabled Subsystem block.*
6.4.4.1 Test coverage of low-level
requirements is achieved
Fcn block MC_SL_FCN Simulink Verification and
Validation shall provide CC,MCDC, and relational
boundary coverage for theFcn block.*
For Iterator, For
Iterator
Subsystem blocks
MC_SL_FOR Simulink Verification and
Validation shall provide DCfor the For Iterator, ForIterator Subsystem blocks.*
If, If Action
Subsystem blocksMC_SL_IF Simulink Verification and
Validation shall provide DC,CC, MCDC, and relational boundary coverage for the If,If Action Subsystem blocks.*
Interpolation Using
Prelookup block
MC_SL_PREL
UT
Simulink Verification and
Validation shall provide LUTand saturate on integer
overflow coverage for theInterpolation Using Prelookup blocks.*
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
Logical Operator
block
MC_SL_LOGI
C
Simulink Verification and
Validation shall provide CCand MCDC coverage for the
Logical Operator blocks.*
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.2.d Low-level requirements are
verifiableMB.6.3.3.d Software architecture isverifiable
MB.6.3.2.a Low-level requirementscomply with high-level requirements
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-level
requirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
8/20/2019 Qualkitdo Slvnv Tor
33/41
2-25
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
1-D Lookup Table
block
MC_SL_LUT1
D
Simulink Verification and
Validation shall providelookup table and saturate oninteger overflow coverage for
the 1-D Lookup Table block.*
6.4.5 Test cases and procedures are
correct6.4.4.1 Test coverage of high-levelrequirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved2-D Lookup Table
block
MC_SL_LUT2
D
Simulink Verification and
Validation shall provide
lookup table and saturate oninteger overflow coverage forthe 2-D Lookup Table block.*
n-D Lookup Table block
MC_SL_LUTND
Simulink Verification andValidation shall providelookup table and saturate oninteger overflow coverage forthe n-D Lookup Table block.*
MATLAB Function
blockMC_SL_EML Simulink Verification and
Validation shall provide DC,CC, MCDC, and relational
boundary coverage for the
MATLAB Function block.*
MB.6.3.1.d High-level requirements are
verifiable
MB.6.3.2.d Low-level requirements areverifiable
MB.6.3.3.d Software architecture isverifiable
MB.6.3.2.a Low-level requirements
comply with high-level requirements
6.4.5 Test cases and procedures are
correct
6.4.4.1 Test coverage of high-level
requirements is achieved
6.4.4.1 Test coverage of low-levelrequirements is achieved
MinMax block MC_SL_MINM
AX
Simulink Verification and
Validation shall provide DCand saturate on integeroverflow coverage for theMinMax block.*
Model block MC_SL_MDLR
EF
Simulink Verification and
Validation shall provide DC,CC, MCDC, LUT, Simulink
Design Verifier, saturate oninteger overflow coverage,and relational boundarycoverage for the Model block.*
Multiport Switch
block
MC_SL_MPSW
ITCH
Simulink Verification and
Validation shall provide DC
and saturate on integeroverflow coverage for the
Multiport Switch block.*
Rate Limiter block MC_SL_RATLI
M
Simulink Verification and
Validation shall provide DC
relational boundary coveragefor the Rate Limiter block.*
8/20/2019 Qualkitdo Slvnv Tor
34/41
2-26
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Relational Operator
block
MC_SL_RELO
P
Simulink Verification and
Validation shall providecondition and relational boundary coverage for the
Relational Operator block.*
Relay block MC_SL_RELA
Y
Simulink Verification and
Validation shall provide DC
and relational boundarycoverage for the Relay block.*
Saturation block MC_SL_SATURATE
Simulink Verification andValidation shall provide DCand relational boundarycoverage for the Saturation block.*
Sqrt, Signed Sqrt,
Reciprocal SqrtMC_SL_SQRT Simulink Verification and
Validation shall providesaturate on integer overflow
coverage for the Sqrt, Signed
Sqrt, Reciprocal Sqrt blocks.*
Switch block MC_SL_SWIT
CH
Simulink Verification and
Validation shall provide DC,saturate on integer overflowcoverage, and relational boundary coverage for theSaturation block.*
Switch Case, Switch
Case Action
Subsystem blocks
MC_SL_CASE Simulink Verification and
Validation shall provide DC
for the Switch Case, SwitchCase Action Subsystem blocks.*
Triggered Subsystem
block
MC_SL_TRIG
GER
Simulink Verification and
Validation shall provide DC,CC, and MCDC for theTriggered Subsystem block.*
While Iterator, While
Iterator Subsystem blocks
MC_SL_WHIL
E
Simulink Verification and
Validation shall provide DCfor the While Iterator, WhileIterator Subsystem blocks.*
8/20/2019 Qualkitdo Slvnv Tor
35/41
2-27
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Stateflow Cyclomatic
Complexity
MC_SF_CYC Simulink Verification and
Validation shall determine thecyclomatic complexity ofStateflow objects.**
Chart as triggered
Simulink block
MC_SF_TRIG
GER
Simulink Verification and
Validation shall provide DCfor Charts used as a triggered
Simulink block.**
Chart with Exclusive
OR Substates
MC_SF_CHAR
TSUB
Simulink Verification and
Validation shall provide DC
for Charts containingexclusive OR substates.**
Superstate with
Exclusive OR
Substates
MC_SF_SUPE
RSUB
Simulink Verification and
Validation shall provide DC
for Superstates containingexclusive OR substates.**
State with On
Event_Name Action
Statement
MC_SF_ONEV
ENT
Simulink Verification and
Validation shall provide DC
for States with ONEvent_Name ActionStatement.**
Conditional transition
decision
MC_SF_TRAN
DEC
Simulink Verification and
Validation shall provide DCfor conditional transitions.**
Condition coverage of
transition decision
MC_SF_TRAN
COND
Simulink Verification and
Validation shall provide CC
for transition decisions.**
MC/DC coverage oftransition decision
MC_SF_TRANMCDC
Simulink Verification andValidation shall provideMCDC for transitiondecisions.**
Relational boundary
coverage for Stateflow
MC_SF_BOUN
DCOV
Simulink Verification and
Validation shall provide boundary coverage forStateflow.**
8/20/2019 Qualkitdo Slvnv Tor
36/41
2-28
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Truth Table conditions MC_SF_TTCO
ND
Simulink Verification and
Validation shall provide CCfor Truth Tables.
For details, see “ModelCoverage for Stateflow Truth
Tables” in SimulinkVerification and Validation
Model Coverage User
Information.
Truth Table decisions MC_SF_TTDEC
Simulink Verification andValidation shall provide DCfor Truth Tables.
For details, see “ModelCoverage for Stateflow TruthTables” in Simulink
Verification and Validation
Model Coverage User
Information.
Truth Table MC/DC MC_SF_TTMC
DC
Simulink Verification and
Validation shall provideMCDC for Truth Tables.
For details, see “ModelCoverage for Stateflow TruthTables” in Simulink
Verification and Validation
Model Coverage User Information.
8/20/2019 Qualkitdo Slvnv Tor
37/41
2-29
Model CoverageCapability
RequirementID
Description DO-178C/DO-331 References
Simulink Design
Verifier Coverage
MC_SLDV_SL
DV
Simulink Verification and
Validation shall provideSimulink Design VerifierCoverage.
For details, see “Simulink
Design Verifier Coverage” inSimulink Verification and
Validation Model Coverage
User Information.
6.4.5 Test cases and procedures are
correct
Proof Assumption block
MC_SLDV_PR OOFASM
Simulink Verification andValidation shall provideSimulink Design Verifiercoverage for the Proof
Assumption block.*
Proof Objective block MC_SLDV_PR
OOFOBJ
Simulink Verification and
Validation shall provide
Simulink Design Verifiercoverage for the Proof
Objective block.*
Test Condition block MC_SLDV_TE
STCON
Simulink Verification and
Validation shall provideSimulink Design Verifiercoverage for the TestCondition block.
Test Objective block MC_SLDV_TE
STOBJ
Simulink Verification and
Validation shall provide
Simulink Design Verifier
coverage for the TestObjective block.*
* See “Model Objects That Receive Coverage” in Simulink Verification and Validation Model Coverage User Information.
** See “Model Coverage for Stateflow Charts” in Simulink Verification and Validation Model Coverage User
Information.
8/20/2019 Qualkitdo Slvnv Tor
38/41
2-30
2.4 Model Coverage User InformationThe Simulink ® Verification and Validation™ user information for the model coverage is in the
Simulink Verification and Validation Model Coverage User Information.
To access the user information document, on the MATLAB® command line, type qualkitdo to open the Artifacts Explorer. The document is in Simulink Verification and Validation.
8/20/2019 Qualkitdo Slvnv Tor
39/41
3 Installation
To use the Simulink ® Verification and Validation™ product, install the following MathWorks®
products:
MATLAB®
Simulink ®
Simulink Verification and Validation
Instructions for installing the products are available at the MathWorks Documentation Center,R2015b:
Installation
http://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.htmlhttp://www.mathworks.com/help/releases/R2015b/index.html
8/20/2019 Qualkitdo Slvnv Tor
40/41
3-2
8/20/2019 Qualkitdo Slvnv Tor
41/41
4 Operational Environment
The DO Qualification Kit product supports the following operating environments for the
Simulink ® Verification and Validation™ product:
Personal computer
One of the following operating systems:
- Microsoft® Windows® - Linux®1
MATLAB® Software
Simulink ® Software
Simulink Verification and Validation software
1 Linux® is a registered trademark of Linus Torvalds.