Research projects


This project will develop a completely European, ITAR-free microcontroller for space applications, focused on small satellites, flight control and payload computers for the purposes of mission control, earth observation, navigation and many other applications. The microcontroller will provide mechanisms for increased reliability and adaptability according to the needs of the space applications. In addition to the microcontroller, the required ITAR-free middleware, RTOS and toolchain will also be made available.


A German civil-aviation project supported by the Federal Ministry for Economic Affairs and Energy as part of their civil-aviation research program. The project aims to establish a DO-178C/DO-330 qualifiable toolchain for multicore software development. The toolchain includes CompCert and TimeWeaver. It is used in a demonstration project in which a TSO-C151b Terrain Avoidance and Warning System is being developed in accordance with DAL-C.


This project aims to develop new, formally-motivated techniques that will allow execution time, energy usage, security, and other important non-functional properties of parallel software to be treated effectively, as first-class citizens. The project brings together leading industrial and academic experts in parallelism, energy modeling, worst-case execution time analysis, non-functional property analysis, compilation, security, and task coordination. Results will be evaluated using industrial use cases taken from the domains of computer vision, satellites, flying drones, medicine and cybersecurity. The three-year research project is funded by the EU Horizon 2020 research and innovation programme.


This project investigated the challenges arising from the interdependence of safety, security and performance of safety-critical systems in the domains of transportation, space, medicine, and industrial control. AQUAS aimed at efficient solutions for the entire product life-cycle, and put forth a coordinated engineering approach to address the continuously growing requirements on security and performance, while maintaining safety.


This project developed a holistic approach for programming hetero­ge­neous multicore and many-core architectures using automatic paralleli­zation of model-based real-time applications. ARGO enhanced WCET-aware automatic parallelization by a cross-layer programming approach com­bining automatic tool-based and user-guided paralleli­zation, thus reducing the need for expertise in pro­gramming parallel hetero­geneous archi­tectures.


This project provided an affordable and safe engineering methodology that allows the industry to develop mobility solutions with trustworthy new functions at competitive prices.


With the aid of an all-new debugging system, this project collected and analyzed trace data in real time. To that end, an FPGA platform and several specialized synthesis applications were developed.


In this project, consortium members from six countries around the world developed a new standard (eFMI: FMI for embedded systems) to exchange physics-based models between modeling and simulation environments with software development environments for electronic control units, micro controllers, and other embedded systems. Enabling advanced control and diagnosis functions based on physical models will enhance the production code in vehicles and lower the development cost and time.


This project investigated the effects of hardware errors on the software. These included single-event upsets that manifest themselves via bit flips in memory cells and registers. PROFORMA worked on models, techniques, and automatic tool chains that enable developers to formally prove whether or not hardware errors will affect particular tasks or certain functionality. The project was funded by the German Federal Ministry of Education and Research.


A mid-term project funded by the German Federal Ministry of Education and Research. A follow-up to the FORTE project, this time focusing on veri­fication of concurrent systems.


A shared-cost research and technology development project of the Euro­pean IST Programme, focused on validation of critical avionics software by static analysis and abstract testing.


Funded by the German Federal Ministry of Education and Research, this project was concerned with developing an energy-efficient computer system for processing sensor data in automated vehicles.


A three-year focused-research project within the European Commission’s 7th Framework Programme on Research, Technological Development and Demonstration. Steered by Airbus and Bosch, the project im­proved the design and development methods for safety-critical embedded systems, by devel­oping architectural concepts that support the derivation of timing guarantees for hard real-time systems, and providing the cor­re­sponding architectural platforms.


This project significantly improved integration and interoperability of tools for embedded-software development, in addition to de­veloping novel tech­niques for system-level and node-level analysis of non­func­tional properties such as worst-case execution timing, stack usage and schedulability.


A follow-up to Interest, within European Commission’s 7th Framework Pro­gramme on Research, Technological Development and Demonstration. This time the project partners created an open interoperable em­bedded systems toolchain that fulfills the needs of the industry for designing and proto­typing embedded systems.


Funded by the German Federal Ministry of Education and Research, this three-year research project demonstrated the usability of multicore technology in safety-critical applications, and improved the technological basis for increased safety, efficiency, and comfort in the automotive, avionics, and rail trans­portation domains.


A follow-up to the ARAMiS project. This time the focus lay on optimization and advancement of the development processes, especially tools and platforms for the efficient usage of multicore technology. The appli­cability of all concepts and approaches was put to the test in industrial use cases from the automotive, avionics and industry automation domains. The three-year project was sponsored by the German Federal Ministry of Education and Research.

Verisoft and Verisoft XT

A long-term research project focused on creation of methods and tools which allow persistent formal verification of the design of integrated com­puter systems.


A middle-term research project focused on creation of a continuous de­ve­lop­ment process for embedded systems which allows formal ve­ri­fi­cation of safety-critical real-time aspects.


This project addressed the specification, tran­si­tion and exchange of relevant timing information throughout different steps of the AUTOSAR-based development process and tool chain. TIMMO-2-USE significantly increased automation for more pre­dictable development cycles, substantially reducing development risks and time-to-market, while increasing reliability, safety, robustness, and fault tolerance.


A two-year project supported by the ITEA2 program (Information Tech­no­logy for European Advancement). It focused on the improvement, in­te­gra­tion, and dissemination of product-based software verification techniques.


A three-year research project funded by the European ARTEMIS Joint Undertaking. MBAT combined advanced model-based testing technologies with static analysis and verification techniques, to enable effective and efficient validation and veri­fication of embedded systems.


A research project within the European Commission’s 7th Framework Programme on Research, Technological Development and Demonstration. The project aimed at combining available timing tools, thus strengthening the European lead in the timing analysis area. ALL-TIMES has enabled interoperability of various tools from SMEs and universities, and developed integrated tool chains using open tool frameworks and interfaces.


This project established a unique European virtual center of excellence on Embedded Systems Design, combining competencies from electrical en­gineering, computer science, applied mathematics and control theory, and covering all aspects from theory through to applications.


A mid-term project funded by the German Federal Ministry of Education and Research. It improved and integrated the project partners’ formal veri­fication techniques for C and VHDL programs, thus increasing the overall benefit of formal verification, especially for the automotive in­dustry.


A project partially funded by the European Commission under the 7th Framework Programme for Information and Communications Tech­nolo­gies. T-CREST developed and built a system that prevents delays in the execution of safety-critical software. The system will result in lower costs and reduced complexity of safety relevant applications.


A three-year project funded by the European Commission under the 7th Framework Programme for Information and Communications Tech­nologies. CERTAINTY worked out a methodo­logy for the devel­opment of complex critical applications, notably for many-core and multicore pro­cessors.


Another European-funded project from ARTEMIS Joint Undertaking whose goal was to boost the cost efficiency of embedded-system development, and safety and certification processes. CESAR pursuited a multi-domain approach, integrating large enterprises, suppliers, SMEs, vendors of cross sectoral domains, and leading research organizations.


The purpose of this project was to develop and support industrially appli­cable techniques for software specification, design, and development. Par­tic­ular emphasis was put on methods supporting the development of soft­ware for communication and control applications.


This project identified, quantified and certified resource-bounded code in a domain-specific high-level programming lan­guage for real-time embedded systems. Using formal models of resource con­sumption as a basis, the project developed static analyses for time and space consumption and assessed these against realistic applications for embedded systems.


A research project funded by the European Space Agency (ESA) under the basic Technology Research Programme (TRP). COLA was a follow-on project to PEAL2 (Prototype Execution-time Analyser for LEON). The pur­pose of COLA was to investigate how software running on a processor with cache can achieve maximum performance while remaining testable, pre­dictable and analyzable. This work was done with particular reference to the LEON, which is widely used in space applications.