Cache-aware development of high integrity real-time systems

Cost, performance and availability considerations are forcing even the most conservative high-integrity embedded real-time systems industry to migrate from simple hardware processors to ones equipped with caches and other acceleration features. This migration disrupts the practices and solutions that industry had developed and consolidated over the years to perform timing analysis. Industry that are confident with the efficiency/effectiveness of their verification and validation processes for old-generation processors, do not have sufficient insight on the effects of the migration to cache-equipped processors. Caches are perceived as an additional source of complexity, which has potential for shattering the guarantees of cost- and schedule-constrained qualification of their systems. The current industrial approach to timing analysis is ill-equipped to cope with the variability incurred by caches. Conversely, the application of advanced WCET analysis techniques on real-world industrial software, developed without analysability in mind, is hardly feasible. We propose a development approach aimed at minimising the cache jitters, as well as at enabling the application of advanced WCET analysis techniques to industrial systems. Our approach builds on:(i) identification of those software constructs that may impede or complicate timing analysis in industrial-scale systems; (ii) elaboration of practical means, under the model-driven engineering (MDE) paradigm, to enforce the automated generation of software that is analyzable by construction; (iii) implementation of a layout optimisation method to remove cache jitters stemming from the software layout in memory, with the intent of facilitating incremental software development, which is of high strategic interest to industry. The integration of those constituents in a structured approach to timing analysis achieves two interesting properties: the resulting software is analysable from the earliest releases onwards - as opposed to becoming so only when the system is final - and more easily amenable to advanced timing analysis by construction, regardless of the system scale and complexity.

The challenges and the limitations in Life Cycle Impact Assessment for metal oxide nanoparticles, a case study on nano- TiO2

Life Cycle Assessment (LCA) is a chain-oriented tool to evaluate the environment performance of products focussing on the entire life cycle of these products: from the extraction of resources, via manufacturing and use, to the final processing of the disposed products. Through all these stages consumption of resources and pollutant releases to air, water, soil are identified and quantified in Life Cycle Inventory (LCI) analysis. Subsequently to the LCI phase follows the Life Cycle Impact Assessment (LCIA) phase; that has the purpose to convert resource consumptions and pollutant releases in environmental impacts. The LCIA aims to model and to evaluate environmental issues, called impact categories. Several reports emphasises the importance of LCA in the field of ENMs. The ENMs offer enormous potential for the development of new products and application. There are however unanswered questions about the impacts of ENMs on human health and the environment. In the last decade the increasing production, use and consumption of nanoproducts, with a consequent release into the environment, has accentuated the obligation to ensure that potential risks are adequately understood to protect both human health and environment. Due to its holistic and comprehensive assessment, LCA is an essential tool evaluate, understand and manage the environmental and health effects of nanotechnology. The evaluation of health and environmental impacts of nanotechnologies, throughout the whole of their life-cycle by using LCA methodology. This is due to the lack of knowledge in relation to risk assessment. In fact, to date, the knowledge on human and environmental exposure to nanomaterials, such ENPs is limited. This bottleneck is reflected into LCA where characterisation models and consequently characterisation factors for ENPs are missed. The PhD project aims to assess limitations and challenges of the freshwater aquatic ecotoxicity potential evaluation in LCIA phase for ENPs and in particular nanoparticles as n-TiO2.

Ricerche di campo per lo sviluppo della tecnologia del maschio sterile nella lotta ad Aedes albopictus (Skuse)

Aedes albopictus (Skuse), comunemente detta Zanzara Tigre, ha invaso, negli ultimi anni, molti paesi, soprattutto in modo passivo attraverso il commercio di pneumatici usati. Questa specie è particolarmente adatta all'applicazione della tecnica dell'insetto sterile (SIT), basata su allevamento massale, sterilizzazione e rilascio in campo di un gran numero di maschi della specie vettrice. I maschi sterili rilasciati devono essere in grado di volare, di disperdersi sul territorio, di sopravvivere, di essere sessualmente attivi abbastanza a lungo per coprire il tempo tra una fase di rilascio e la successiva, di individuare le femmine vergini selvatiche e competere con successo per l'accoppiamento con i maschi selvatici. La dispersione e la sopravvivenza dei maschi di Ae. albopictus allevati in laboratorio, sono state studiate mediante tecniche di marcatura, rilascio e ricattura. Le catture sono state eseguite da tecnici specializzati, in un raggio di 350 m dal sito di rilascio. Gli esperimenti condotti hanno dimostrato che i maschi sono in grado di disperdersi, dal sito di rilascio, per circa 200 m ma la loro longevità in campo è fortemente dipendente dalle condizioni climatiche. In studi di semi-campo e di campo è stato valutato uno speciale dispositivo progettato per essere incluso nella stazione di rilascio dei maschi in grado di fornire loro fonti energetiche per migliorarne le prestazioni. I risultati ottenuti sono stati positivi. Studi di competitività sono stati condotti in tunnel costruiti in un ambiente naturale al fine di validare un protocollo per studi sulla competitività dei maschi in questo modello sperimentale. Maschi irraggiati mediante l'applicazione di raggi gamma alla dose di 30 Gy sono stati messi in competizione con maschi fertili per l'accoppiamento con femmine vergini con diversi rapporti. I risultati ottenuti hanno dimostrato le buone prestazioni e l'affidabilità di questo modello sperimentale rimanendo però irrisolto il problema dell’elevata variabilità.

Development of control-oriented models of Dual Clutch Transmission systems

A control-oriented model of a Dual Clutch Transmission was developed for real-time Hardware In the Loop (HIL) applications, to support model-based development of the DCT controller. The model is an innovative attempt to reproduce the fast dynamics of the actuation system while maintaining a step size large enough for real-time applications. The model comprehends a detailed physical description of hydraulic circuit, clutches, synchronizers and gears, and simplified vehicle and internal combustion engine sub-models. As the oil circulating in the system has a large bulk modulus, the pressure dynamics are very fast, possibly causing instability in a real-time simulation; the same challenge involves the servo valves dynamics, due to the very small masses of the moving elements. Therefore, the hydraulic circuit model has been modified and simplified without losing physical validity, in order to adapt it to the real-time simulation requirements. The results of offline simulations have been compared to on-board measurements to verify the validity of the developed model, that was then implemented in a HIL system and connected to the TCU (Transmission Control Unit). Several tests have been performed: electrical failure tests on sensors and actuators, hydraulic and mechanical failure tests on hydraulic valves, clutches and synchronizers, and application tests comprehending all the main features of the control performed by the TCU. Being based on physical laws, in every condition the model simulates a plausible reaction of the system. The first intensive use of the HIL application led to the validation of the new safety strategies implemented inside the TCU software. A test automation procedure has been developed to permit the execution of a pattern of tests without the interaction of the user; fully repeatable tests can be performed for non-regression verification, allowing the testing of new software releases in fully automatic mode.

Severe Accident Simulation of Small Modular Reactors

Since the Three Mile Island Unit 2 (TMI-2), accident in 1979 which led to the meltdown of about one half of the reactor core and to limited releases of radioactive materials to the environment, an important international effort has been made on severe accident research. The present work aims to investigate the behaviour of a Small Modular Reactor during severe accident conditions. In order to perform these analyses, a SMR has been studied for the European reference severe accident analysis code ASTEC, developed by IRSN and GRS. In the thesis will be described in detail the IRIS Small Modular Reactor; the reference reactor chosen to develop the ASTEC input deck. The IRIS model was developed in the framework of a research collaboration with the IRSN development team. In the thesis will be described systematically the creation of the ASTEC IRIS input deck: the nodalization scheme adopted, the solution used to simulate the passive safety systems and the strong interaction between the reactor vessel and the containment. The ASTEC SMR model will be tested against the RELAP-GOTHIC coupled code model, with respect to a Design Basis Accident, to evaluate the capability of the ASTEC code on reproducing correctly the behaviour of the nuclear system. Once the model has been validated, a severe accident scenario will be simulated and the obtained results along with the nuclear system response will be analysed.