Development of redundant components for industrial control systems

Development of redundant components for industrial control systems (EN 3444) Adrian Crestar Santome Supervisors: Manuel Gonzalez Berges, Jean-Charles Tournier BE/ICS/SDS 29/11/2016

Table of Contents • Context: • Standard Architecture for Redundant Control Systems • Redundant Test Framework • Background • Previous work • What’s new • Other activities • Future work

Standard Architecture for Redundant Control Systems

Redundant Test Framework: background • Existing need: • How to test software in an Industrial Control Redundant system? • Problems: • Such system is not trivial to configure: several possible system configurations/states. • No existing tool for testing in redundancy. • Objective: • An automated way of testing our software in a redundant system • for different configurations • with the minimum of manual intervention.

Redundant Test Framework: previous work • Solution proposed: • Beta version. • Not yet in production.

Redundant Test Framework: what’s new • Deployed in production: Total Software packages tested 42 Tests executed 2, 048 Redundancy specific errors 4 • Set of guidelines for redundancy awareness: • A developer has to know how the system operates in each state: • What is different regarding a “normal” system? • Any special conditions? • Based on that, it is possible to define the behaviour of the software in a redundant environment.

Redundant Test Framework: what’s new (II) • Training session for the section on the use of the framework. • Modifications based on feedback: Before Now System states handled “Normal” redundancy All 8 possible states Execution Manual & Overnight Post-mortem diagnosis Not supported Supported

Other activities • New software component: User Profile • Let the user customize certain parts of an application. • Work in progress: defining the requirements. • Technical support: • ATLAS: • When sorting the information displayed in a table, the sort operation never stops. • Operator is unable to follow the updates on the information. • Impacting application performance. • Radiation monitoring: • Sometimes, going back to redundancy from another state produces an error. • Some data is not computed correctly until the system restarts.

Future work • Redundant Test Framework for Industrial Control Systems: • Enhancements: • Automatic setup of the environment’s initial state. • Currently, this preliminary step has to be done manually. • Support for distributed systems. • Spread the word: • Extend its use to other people. • User Profile component: • Development. • Testing & validation.

Backup slides

Jenkins • Tool for Continuous Integration.

Docker vs Virtual machine