Fault tolerance testing in the Advanced Automation System

Fault tolerance testing of the US Federal Aviation Administration's Advanced Automation System (AAS) is discussed. The relationship to previous work is examined, and a high-level description of AAS and its fault tolerance architecture is given. The techniques and tools used to enable effective fault tolerance testing are presented. The results obtained to date from this testing effort are summarized. The significant lessons learned to date during AAS fault tolerance testing are presented. They are categorized into three areas: testing implications, organizational implications, and tooling implications.<
>