The unrivaled precision of aiT

While the WCET bounds computed by aiT are safe, they are also very tight. Overestimation of the actual WCET is kept extremely low. This has been repeatedly proven by our own tests, customer feedback, and independent reviews alike.

Experiment Target processor Average WCET overestimation
Other methods aiT
Review by Airbus MPC755 “useless” <25%
Review on Volvo code C16x 212% 16%
Tests with ASCET ST10 3%
aiT vs. ARMulator ARM7 5%
WCET Tool Challenge C16x, ARM7, MPC565 >81% 7–8%

Review by Airbus France (aiT for PowerPC 755)

Airbus logo
The comparison shows that the WCET [computed by aiT] typically is about 25% higher than the measured time for the same task, the real but non-calculable WCET being in between. Another comparison is worth to mention: the one between aiT’s results and those of Airbus’ traditional method. As predicted when the decision for using aiT was made, the figures obtained by the traditional approach are a lot higher than those produced by the aiT-based method. Actually the over­estimation is such that the traditional figures are useless.”

The review was conducted with an early prototype of aiT in 2003. The tool’s accuracy has since improved much further.

Review by Mälardalen University on Volvo code (aiT for C16x)

VOLVO logo

In his master’s thesis titled “Static WCET Analysis of Task-Oriented Code for Construction Vehicles”, Daniel Sehlberg found that aiT over­estimated the measured WCET by an average of only 16%. Volvo’s traditional approach overestimated the WCET of the same tasks by an average of 212%.

Chart showing aiT analysis results vs. Volvo’s traditional method vs. measured WCET

Tests with ETAS’ ASCET (aiT for ST10)

ETAS logo

aiT supports tight integration with the ASCET modeling tools from ETAS. The user can start aiT directly from the ASCET project editor menu to perform a WCET analysis of the automatically generated ECU code.

The following table shows a comparison of maximal measured run times and WCETs predicted by aiT for a sample engine throttle control module. The module was specified in ASCET and compiled with the TASKING C compiler v7.5 for an ST10F269 microcontroller board. Run times were extracted from bus traces (iSYSTEMS ILA 128 logic analyzer). The experiment showed an average overestimation of only 3%.

Procedure WCET in cycles Overestimation
Measured Computed by aiT
12912910.0%
2660.0%
326260.0%
42632837.6%
52632837.6%
62632837.6%
7298031385.3%
81331330.0%
91091100.9%
101161170.9%

aiT for ARM7 vs. ARMulator

ARM logo

The ARMulator is a processor simulator provided by ARM as part of the ARM development toolkit. It enables the developer to evaluate the behavior of a pro­gram for a certain ARM processor without using the actual hardware.

In an experiment performed by Daniel Sandell at the Mälardalen University, the WCET estimates provided by aiT were on average only 5% higher than the simulated results provided by ARMulator.

Program WCET in cycles Ratio aiT/ARMulator
ARMulator aiT
Array_complex_updates239925391.06
Array_real_updates126313071.03
Biquad_one_section1501671.11
Convolution_filter6607031.07
Complex_multiply1721901.10
Complex_update1041211.16
Digital_filter97810221.04
Dot_product951081.14
Fibonacci5225321.02
Impulse_response152015981.05
Matrix_convolution709674011.04
Matrix_product_137887399001.05
Matrix_product_234787368001.06
Matrix_product_33173451.09
Matrix_product_4518554421.05
Real_update55661.20
The aiT tool produced in all cases estimates that were higher than the simulated results. We think this is positive, because it gives an indication that the WCET estimates are safe. It should finally be noted that the WCET estimates have been compared against another hardware model and not against the real hardware.”

WCET Tool Challenge (aiT for C16x, ARM7, and PowerPC 565)

ARTIST2 logo

In 2006, aiT participated in the first WCET Tool Challenge, organized by University of Mälardalen and sponsored by the ARTIST2 Network of Excel­lence on Embedded Systems Design. The aim of the challenge was to in­spect and compare different approaches in analyzing the worst-case execu­tion time. All available tools and prototypes able to determine safe upper bounds for the WCET of tasks have participated.

aiT was the only tool that started for three different real processor architectures. It was the only tool that was able to produce results for all test programs. The results of analyses by aiT were in most cases exceptionally precise. Finding in the challenge was, amongst others, that aiT allows for user-friendly WCET analysis, advises against unrealistic annotations, and provides tight WCET values.

Tool Average WCET overestimation Benchmarks handled Automation rate Processor complexity
aiT 7–8% 17/17 (100%) 54% simple, medium, very complex
Bound-T n/a 13/17 (76%) 26% simple, medium
SWEET n/a 15/17 (88%) 88% medium
Chronos 81–89% 13/17 (76%) 24% simulated processor
aiT was able to handle every kind of benchmark and every test program that was tested in the Challenge. aiT is able to support WCET analysis even for complex processors. […] aiT dem­onstrates its leading position through all its features, which contribute to its position as an industry-strength tool, satisfying the requirements from industry as posed by EADS Airbus and proven by the accomplishment in various projects.”