High‐Assurance Distributed, Adaptive Software for Dynamic Systems

Exhaustive testing, documentation, code re-view, and formal methods have been the main ap-proaches for software certification in high con-fidence cyber-physical systems. Although these methods have been sufficient in the past, contin-ued reliance on these methods is no longer eco-nomically feasible for increasingly complex mod-ern, distributed, dynamic systems due to inher-ent problems of state-explosions. Examples of such distributed high-assurance systems include DoD systems (including secure, timely command, control and information sharing systems and for military logistics), systems for manufacturing and process control (for industries whose safety is of critical national importance such as transporta