*******************************************************
* Nordic Seminar on Dependable Computing Systems 1994 *
*                    NSDCS '94                        *
*                                                     *
*             24 - 26 August 1994                     *
*                                                     *
*      Technical University of Denmark,               *
*          DK 2800 Lyngby, Denmark                    *
*******************************************************

Arranged by
   Department of Computer Science,
   Technical University of Denmark

Supported by
   Knud Hoejgaards Fond
   GN Store Nord Fondet
   Thomas B. Thriges Fond
   Forskningsministeriet
   Nordisk Forskerutdanningsakademi
   Danmarks Tekniske Universitet


            Call for Participation
            ======================

The Seminar
===========

Our society is becoming increasingly dependent on computing
systems. High dependability and integrity of these systems
is of paramount importance for the conduct of business, social
services, communication, transportation, safety of humans and
the environment. The seminar is devoted to this theme.

The series of NSDCS seminars is intended to serve as a forum
for interaction between industries, system users, research
institutes and universities in the Nordic countries.

During the seminar, over twenty presentations will be given
describing activities in the Nordic communities. The
presentations cover a wide range of practical as well as
theoretical aspects of Dependability and Fault Tolerance in
computing and control systems:

   *  Railway Systems
   *  Space On-Board Data Systems
   *  Fault Effects and Diagnosis
   *  Security
   *  Formal Methods and Verification
   *  Design Methodology
   *  Protocols and Distributed Systems
   *  Validation and Test

Who should attend
=================

   *  Managers and project leaders responsible for development
      and use of computing and control systems in such
      applications as telecommunication, production, aerospace,
      transactions and transportation.

   *  Designers of such systems  where dependability is of
      paramount importance

   *  Researchers in the area of dependable and fault tolerant
      computing and control systems.

   *  Students working towards a degree. Students may apply for
      grants to cover part of the expenses. See registration form.

Tutorial abstracts
==================
Software is the main impediment to the dependability of
safety critical, fault-tolerant, distributed systems.
Accordingly, the design and evaluation of software
for such systems has been chosen as the main theme
of the following three tutorials given by experts of
high international reputation:


                 Formal Methods:
          Instruments of Justification
            or Tools for Discovery?

                  John Rushby
     CSL, SRI International, Menlo Park, USA

I will examine the role that formal methods can play in the
development and analysis of critical systems.  I will argue that for
maximum utility, formal methods should be applied to the hardest and
most difficult aspects of design, treated early in the lifecycle and
in relatively abstract form.  I will also argue that powerful
mechanical assistance is required if formal methods are to provide
more than documentation.  For illustration, I will use a series of
mechanically-checked formal verifications of properties of algorithms
and architectures for fault-tolerant digital flight control systems.


           Communication Protocols for
           Fault-Tolerant Distributed
               Real-time Systems

                Hermann Kopetz
      Technical University of Vienna, Austria

Any  protocol for  a fault-tolerant distributed real-time system
must have a predictable execution time, provide a short latency
and a minimal latency jitter, and support the property of replica
determinism. This talk surveys some of the available protocols and
presents a new time-triggered communication protocol, TTP, that
integrates all services needed for the implementation of fault-tolerant
hard real-time systems while trying to minimize the bandwidth
requirements.   The application of this protocol to automotive
environments is discussed.


         On a Unified Formal Approach for the
          Development of Fault-Tolerant and
                  Secure Systems

                   Jan Peleska
        Deutsche System-Technik, Kiel, Germany

Until recently, fault-tolerant systems and secure (in the sense
of protection against unauthorised manipulation) systems
were discussed and developed, at least in Germany, in different
- often non-communicating - communities.  Based on experiences
with systems developed at DST and on the insight into future
projects of European industries we motivate that a unified
approach for the development of systems that combine both security
and fault-tolerance properties will become increasingly important.

Practical experience has shown that the a posteriori integration
of security features into a fault-tolerant system and vice versa
is much more complicated than pre-planning every desired dependability
and security feature simultaneously during the specification phase
of the project.  Moreover, for maximum-quality systems intended to
operate in safety-critical or otherwise sensitive environments the
application of formal methods for the development and verification
of the system  is becoming increasingly `popular' and in some cases
even mandatory.  Therefore, DST are investigating formal specification
and verification techniques that support both the description of
fault-tolerance and security. This approach will be illustrated by
means of some examples.


Program
=======

        Wednesday, August 24
        --------------------
08.30  Registration. Coffee

09.15  Opening session

09.30  Formal Methods: Instruments of Justification
       or Tools for Discovery? (Tutorial)
          John Rushby (CSL, SRI International, USA)

       Chair: E.V. Soerensen (DTU, DK)

11.30  Validation and Test
       Chair:  K. Lepp"al"a (VTT, SF)

       Validation and Verification With Weak Process Semantics
          M. Set"al"a (Tampere UT, SF), A. Valmari (VTT, SF)

       Development of Software for Control Systems. A Few
       Selected Cases in Norway
          A. Skavhaug  (ITK-NTH, N)

12.30  Lunch

13.30  Formal Methods. Verification
       Chair: R. Kurki-Suonio (Tampere UT, SF)

       Verification of Real-Timed Applications Using
       The Epsilon-System
          J.C. Godskesen, K.G. Larsen,  A. Skou (AUC, DK)

       The Provably Correct Systems Project (ProCoS)
          A.P. Ravn (DTU, DK)

       Applying a Mechanized Duration Calculus Assistant
          R. Inal, J.U. Skakkebaek (DTU, DK)

15.00  Coffee

15.30  Railway Systems
       Chair: K.E. Sundvall (ABB Signal, S)

       Formalising Railway Interlocking Systems
          K.M. Hansen (DSB & DTU, DK)

       Safety Aspects of a Single-CPU Computer System for
       Safety-Critical Railway Applications
          V. Christensen (NKT, DK)

       An Evaluation  of Using State-Based Specification Languages
       for an Automatic Train Protection System
          W. Nyberg (ABB Signal, S)

       Safety Assessment for a Train Radio System
          T. Staalhane, E.O. Oevstedal (SINTEF DELAB, N)

17.30

20.00  Conference Dinner


           Thursday, August 25
           -------------------

08.30  Communication Protocols for Fault Tolerant
       Distributed Real-time Systems (Tutorial)
          Hermann Kopetz (TU Vienna, Au)

       Chair: J. Torin (CTH, S)

10.30  Coffee

11.00  Fault Effects and Diagnosis
       Chair: B. Ossfeldt (Ericsson Telecom, S)

       Evaluation of a Fault-Tolerant Distributed System
       Using Three Physical Fault Injection Techniques
          J. Karlsson, P. Folkesson (CTH, S), G. Leber,
          J. Reisinger, H. Kopetz (TU Vienna, Au),
          J. Arlat, Y. Crouzet (LAAS-CNRS, F)

       Abstraction of Microprocessor Fault Effects
          M. Rim'en, J. Ohlsson and J. Torin (CTH, S)

       Fault Diagnosis with a Neural Network in AXE10
          J. Johansson (Ericsson Telecom, S)

12.30  Lunch

13.30  Security
       Chair: B.E. Helvik (SINTEF DELAB and NTH, N)

       On the Integration of Security and Dependability
       in Computer Systems
          E. Jonsson, T. Olovsson (CTH, S)

       An Attempt at a Quantitative Assessment of Security
       Based on Intrusion Experiments
          T. Olovsson, E. Jonsson (CTH, S)

       A Comparison of the Conventional and Formal
       Design of a Secure System Component
          T.M. Brookes, M.A. Green (British Aerospace, GB),
          J.S. Fitzgerald (U Newcastle, GB),
          P.G. Larsen (IFAD, DK)

15.00  Coffee

15.30  Design Methodology
       Chair: H. Rischel (DTU, DK)

       Reliability Estimates for Repairable
       Fault-Tolerant Systems
          O. Bridal (CTH, S)

       Implementing Run-Time Evaluation of Distributed Timing
       Constraints in a Real-Time Environment
          C.H. Kristensen, N. Drejer (AUC, DK)

       User-Centred Software Engineering - A Comprehensive View of
       Software Development
          C. Wohlin, B. Regnell, A. Wessl'en, H. Cosmo (Lund IT, S)

       Assessment of Microprocessor Controlled Devices (NORDTEST)
          J. Jacobson (SP, S)

17.00

              Friday, August 26
              -----------------

 8.30  On a Unified Formal Approach for the Development of
       Fault-Tolerant and Secure Systems (Tutorial)
          Jan Peleska (DST, Kiel, D)

       Chair: H. Rischel (DTU, DK)

10.30  Coffee

11.00  Space On-Board Data Systems
       Chair: E. Vefsnmo (CAP  COMPUTAS, N)

       Fault-Tolerance and Reliability Advancing Techniques
       in Software Development for On-Board Spacecraft Instruments
          P. Ruuska (VTT, SF)

       En eksperimentell metod att studera straalningsinducerade
       fel i kombinatorik (An experimental method for the study of
       radiation-induced faults in combinational circuits)
          R. Johansson, P. Lid'en, P. Dahlgren, J. Karlsson (CTH, S)

       A Software Development Approach for On-Board Systems
          C. Joergensen, G. Caspersen, T.H. Puls (CRI, DK)

12.30  Lunch

13.30  Protocols and Distributed Systems
       Chair: P.E. Heegaard (IDT-NTH, N)

       Identification of Operational Modes of Distributed Systems
       by Cluster Analysis
          B.E. Helvik (SINTEF DELAB and NTH, N),
          S.A. Gylterud (Ericsson, N)


       Fault-Tolerant Mechanisms in Distributed Data Base Management
       Systems
          S.-O. Hvasshovd, O. Torbjoernsen (TF, N)

       Self Stabilization of a Protocol
          P. Kellom"aki (Tampere UT, SF)

15.00  Closing Session
       Chair: E.V. Soerensen (DTU, DK)

15.30   End of seminar

Programme Committee
===================
   Poul E. Heegaard, NTH (N)
   Bjarne E. Helvik,  SINTEF DELAB and NTH (N)
   Reino Kurki-Suonio, Tampere UT (SF)
   Kari Lepp"al"a, VTT (SF)
   Bengt Ossfeldt,  Ericsson Telecom (S)
   Hans Rischel, DTU (DK)
   Kjeld Dittmann, Soeren T. Lyngsoe A/S  (DK)
   Karl E. Sundvall, ABB SIGNAL, Stockholm (S)
   Erling V. Soerensen (Chairman), DTU (DK)
   Jan Torin, CTH (S)
   Eirik Vefsnmo, CAP  COMPUTAS (N)


Registration information
========================
The fee includes the proceedings, admittance to all sessions, lunches
and coffee breaks during the conference, and the conference dinner.

Payment
=======
The registration fee MUST be paid in advance and sent to us with the
registration form.

Please enclose a bank cheque made out in Danish Kroner (DKK)
issued to

NSDCS'94
Department of Computer Science
Tech. Univ. of Denmark, Bldg. 344
DK-2800 Lyngby, Denmark.
Att.: Disa la Cour

Unfortunately we cannot accept private cheques or Euro-cheques.

Cancellation
============
In case of cancellation before 10  August, the fee will be refunded
less a cancellation charge of DKK 500. No refund will be made for
cancellation after this date.

Travel grants
=============
NSDCS'94 has a reserved sum for student travel grants. If you want
to apply for a grant: (a) check the grant box, (b) enclose a grant
application, (c) observe the early date for registration with grant
application (13 June) and (d) send no money with registration.
Applicants will be informed of the outcome of the application within
two weeks of the application deadline, and will be advised of the
remaining amount to be paid.

A travel grant application should contain name, address,
nationality, age, type of student (full time, part time, undergraduate,
postgraduate), student status confirmed by responsible university
supervisor, academic profile, and a travel budget.

NSDCS'94 will strive to level out the differences in travel
expenses for student participants from the
Nordic countries.

Further information
===================
Information regarding hotel accomodation will be mailed to
registered participants from the hotel. For additional
information please contact Disa la Cour or Hans Rischel,
phone: +45 45 93 33 32, fax: +45 42 88 45 30.
E-mail: dlc@id.dtu.dk, rischel@id.dtu.dk


Registration form, NSDCS'94
===========================
Surname:
         ----------------------------------------
First Name:
         ----------------------------------------
Office:
         ----------------------------------------
Address:
         ----------------------------------------
Country:
         ----------------------------------------

Hotel accomodation
==================
Hotel Eremitage  Single DKK 635 [ ]   Double DKK 735 [ ]
    20 min. walking distance or bus

Gentofte Hotel   Single DKK 510 [ ]   Double DKK 670 [ ]
   Train + bus, 45 min.

The hotels are very different, but both of high quality. Hotel
Eremitage is a modern hotel in the middle of the commercial
center in Lyngby, close to the campus.
Gentofte Hotel is an older ``small-town'' hotel at a greater
distance from the campus.

All prices per day. Breakfast incl. No deposit.
Account to be settled with the hotel upon departure.

Arrival date:                   Departure date:
              -----------------                 -----------------
No. of persons:
                --------

Payment and registration
========================
Do you apply for a student travel grant ?   [ ]
If so, follow the instructions in section ``Travel grants'' above
(notice the deadline for travel grant applications: 13 June).

Registration fee (paid before 20 June)  DKK 2000  Bank checque enclosed [ ]
Registration fee (paid later)           DKK 2500  Bank checque enclosed [ ]

Please send your registration form together with a bank
cheque to

NSDCS'94
Department of Computer Science
Tech. Univ. of Denmark, Bldg. 344
DK-2800 Lyngby, Denmark.
Att.: Disa la Cour