Two complementary approaches to test robustness of reactive systems

Robustness is an important aspect for reactive embedded systems. In this paper, we present two complementary approaches dedicated to test the robustness of reactive systems specified in the IOLTS model. The first approach uses the specification to build a hazards matrix permitting to generate cases. The other one is based on two specifications, a nominal and a degraded one describing the minimal required behaviour of the system.