In: Proc. 26th Annual Int. Symp. on Fault-Tolerant Computing, 25-27 June 1996, Sendai, Japan, pages 106-115. 1996.
Abstract: The aim of this work is to provide a quantified means helping in the definition of a new architecture for CAUTRA, a subset of the French Air Traffic Control system. To do this, alternative architectures for CAUTRA are define whose availability is compared in order to select the architecture with the highest level of availability. Modeling is carried out following a modular and systematic approach, based on the derivation of block models at a high level of abstraction. In a second step, the blocks are replaced by their equivalent generalized stochastic Petri nets to build up the detailed model of the architecture. Emphasis is placed on modeling interactions between hardware and software components.
Keywords: CAUTRA, Petri nets, air traffic control, dependability modeling.