I. Background and .. , 21 II

I. Aadl-dependability-modeling-patterns and .. , 45 III.1 Modeling independent components, 46 III.2 Modeling dependencies

F. Shared-maintenance, 49 III.2.3.2 Priority to a component's maintenance, .51 III.2

.. Fault-tolerance-patterns, 54 III.3.1.1 Hardware fault-tolerance, Cold standby sparing, p.56

.. Software-fault-tolerance, 64 III.3.1.2.1 N-version programming, p.65

.. Overview-of-the-transformation, 69 IV.2 Transforming error models of independent components, p.70

/. Activate and T. , 93 IV.5.3.1 Rule presentation, p.95

.. Transforming, 96 IV.6.1 Transforming abstract error models96 IV.6.2 Transforming derived error models, .98 IV.7 Taking into account architecture configurations, p.99

V. Gspn and .. , AADL dependability model and transformation to

C. Appendix and .. Model-transformation-tool, 141 C.1 A developer's perspective141 C.1.1 gspnModel: Ecore metamodel, p.144

R. Agrawal, G. Karsai, and F. Shi, Graph Transformations on Domain-Specific Models, 2003.

[. Marsan, Modelling with Generalized Stochastic Petri Nets, Wiley Series in Parallel Computing, p.301, 1995.
DOI : 10.1145/288197.581193

A. Avizienis, J. Laprie, and B. Randell, Dependability and Its Threats: A Taxonomy, 18th IFIP World Computer Congress, pp.91-120, 2004.
DOI : 10.1007/978-1-4020-8157-6_13

. Balbo, Combining queueing networks and generalized stochastic Petri nets for the solution of complex models of system behavior, IEEE Transactions on Computers, vol.37, issue.10, pp.1251-1268, 1988.
DOI : 10.1109/12.5986

. Barlow, Reliability and Fault Tree Analysis, 1975.

[. Dugan, Dynamic fault-tree models for fault-tolerant computer systems, IEEE Transactions on Reliability, vol.41, issue.3, pp.363-377, 1992.
DOI : 10.1109/24.159800

[. Dugan, &. Lyu, ]. J. Bechta-dugan, and M. R. Lyu, Dependability Modeling for Fault- Tolerant Software and Systems, Software Fault-tolerance, pp.47-80, 1995.

. Beder, An application of fault tolerance patterns and coordinated atomic actions to a problem in railway scheduling, ACM SIGOPS Operating Systems Review, vol.34, issue.4, pp.21-31, 2000.
DOI : 10.1145/506106.506109

. Béounes, SURF-2: A program for dependability evaluation of complex hardware and software systems, FTCS-23 The Twenty-Third International Symposium on Fault-Tolerant Computing, pp.668-673, 1993.
DOI : 10.1109/FTCS.1993.627372

. Bernardi, GreatSPN in the new millenium, Tool Session of 9th Int. Workshop on Petri Nets and Performance Models, 2001.

]. S. Bernardi and S. Donatelli, Building Petri net scenarios for dependable automation systems, 10th International Workshop on Petri Nets and Performance Models, 2003. Proceedings., pp.72-83, 2003.
DOI : 10.1109/PNPM.2003.1231544
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.126.9608

. Bernardi, From UML sequence diagrams and statecharts to analysable petri net models, Proceedings of the third international workshop on Software and performance , WOSP '02, pp.35-45, 2002.
DOI : 10.1145/584369.584376
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.133.2609

&. Bernardi, ]. S. Merseguer, J. Bernardi, and . Merseguer, A UML profile for dependability analysis of real-time embedded systems, Proceedings of the 6th international workshop on Software and performance , WOSP '07, pp.115-124, 2007.
DOI : 10.1145/1216993.1217012

]. J. Bézivin, Model Driven Engineering: An Emerging Technical Space, Generative and Transformational Techniques in Software Engineering, pp.36-64, 2006.
DOI : 10.1007/11877028_2

S. Vestal, Hierarchical composition and abstraction in architecture models, 18th IFIP World Computer Congress, ADL Workshop, pp.43-52, 2004.

]. A. Blakemore, The cost of eliminating vanishing markings from generalized stochastic Petri nets, Proceedings of the Third International Workshop on Petri Nets and Performance Models, PNPM89, 1989.
DOI : 10.1109/PNPM.1989.68542

. Blanquart, Toward Model-Based Engineering for Space Embedded Systems and Software, 3rd European Congress on Embedded Real Time Software, 2006.

]. A. Bobbio and K. S. Trivedi, An Aggregation Technique for the Transient Analysis of Stiff Markov Chains, IEEE Transactions on Computers, vol.35, issue.9, pp.35803-814, 1986.
DOI : 10.1109/TC.1986.1676840

. Bondavalli, Dependability Analysis in the Early Phases of UML Based System Design, Int. Journal of Computer Systems -Science & Engineering, vol.16, issue.5, pp.265-275, 2001.

. Bondavalli, High-level Integrated Design Environment for dependability (HIDE), Proceedings. Fifth International Workshop on Object-Oriented Real-Time Dependable Systems, pp.87-92, 1999.
DOI : 10.1109/WORDSF.1999.842338
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.11.5514

. Bondavalli, Dependability Modelling and Sensitivity Analysis of Scheduled Maintenance Systems, 3rd European Dependable Computing Conference (EDCC-3), pp.7-23, 1999.
DOI : 10.1007/3-540-48254-7_2

]. A. Brown and K. Wallnau, Engineering of component-based systems, Proceedings of ICECCS '96: 2nd IEEE International Conference on Engineering of Complex Computer Systems (held jointly with 6th CSESAW and 4th IEEE RTAW), pp.414-422, 1996.
DOI : 10.1109/ICECCS.1996.558485

A. E. Rugina, A Library Implementing Propagation Rules defined in the AADL Error Model Annex LAAS-CNRS, N°07001, 2007.

J. A. Cassaing, L. Pomies, and E. Roblet, How to Use the NEPTUNE Technology in the Modelling Process, Conference on Ata System In Aerospace, 2002.

&. Chiola, ]. G. Donatelli, S. Chiola, and . Donatelli, GSPNs versus SPNs: what is the actual role of immediate transitions?, Proceedings of the Fourth International Workshop on Petri Nets and Performance Models PNPM91, pp.20-30, 1991.
DOI : 10.1109/PNPM.1991.238785

]. G. Ciardo and A. Miner, A Data Structure for the Efficient Kroneker Solution of GSPNs, 8th Int. Workshop on Petri Nets and Performance Models, pp.22-31, 1999.

&. Ciardo, . Trivedi-1993a-]-g, K. S. Ciardo, and . Trivedi, A decomposition approach for stochastic reward net models, Performance Evaluation, vol.18, issue.1, pp.37-59, 1993.
DOI : 10.1016/0166-5316(93)90026-Q

&. Ciardo, . Trivedi-1993b-]-g, K. S. Ciardo, and . Trivedi, SPNP: The Stochastic Petri Net Package (Version 3.1), 1st Int. Workshop on Modeling, Analysis and Simulation of Computer and Telecommunication Systems (MASCOTS'93), pp.390-391, 1993.

]. K. Czarnecki and S. Helsen, Classification of Model Transformation Approaches, Workshop on Generative Techniques in the Context of Model-Driven Architecture of ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications, 2003.

]. R. De-lemos, Idealised Fault Tolerant Architectural Element, Int. Conf. on Dependable Systems and Networks, Workshop on Architecting Dependable Systems, pp.76-81, 2006.

. Deavours, The Mobius framework and its implementation, IEEE Transactions on Software Engineering, vol.28, issue.10, pp.956-969, 2002.
DOI : 10.1109/TSE.2002.1041052
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.18.2897

F. Debruyne, Y. Simonot-lion, and . Trinquet, EAST-ADL ??? An Architecture Description Language, 18th IFIP World Computer Congress, ADL Workshop, pp.53-62, 2004.
DOI : 10.1007/0-387-24590-1_12
URL : https://hal.archives-ouvertes.fr/inria-00100020

. Delanote, Using AADL in Model-driven Development, IEEE-SEE Int. Workshop on UML and AADL, Int. Conf. on Engineering Complex Computer Systems, 2007.

M. Bennani, R. K. Keller, and M. Boulmalef, Real-time system specifications based on UML Scenarios and Timed Petri Nets, the 2nd IEEE International Symposium on Signal Processing and Information Technology (ISSPIT'02), pp.362-366, 2002.

&. Elkoutbi, ]. M. Keller, R. K. Elkoutbi, and . Keller, Modeling Interactive Systems with Hierarchical Colored Petri Nets, Conference on High Performance Computing, 1998.

B. Farines, J. Berthomieu, P. Bodeveix, P. Dissaux, M. Farail et al., The Cotre project: rigorous software development for real time systems in avionics, 27th IFAC/IFIP/IEEE Workshop on Real Time Programming, 2003.

D. P. Feiler, J. J. Gluch, B. A. Hudak, and . Lewis, Pattern-Based Analysis of an Embedded Real-Time System Architecture, 18th IFIP World Computer Congress, ADL Workshop, pp.83-91, 2004.
DOI : 10.1007/0-387-24590-1_4

. Feiler, The SAE Architecture Analysis & Design Language (AADL), A Standard for Engineering Performance Critical Systems, IEEE Conf. on Computer Aided Control System Design, pp.1206-1211, 2006.

&. Feiler, . H. Rugina-2007-]-p, A. E. Feiler, and . Rugina, Dependability Modeling with the Architecture Analysis and Design Language (AADL), Carnegie Mellon Software Engineering Institute, 2007.

[. Briones, Integration of safety analysis and software development methods, 1st IET International Conference on System Safety, pp.275-284, 2006.
DOI : 10.1049/cp:20060228

. Fota, Incremental Approach for Building Stochastic Petri Nets for Dependability Modeling, Statistical and Probabilistic Models in, pp.321-335, 1999.
DOI : 10.1007/978-1-4612-1782-4_23

H. Giese, M. Tichy, and D. Schilling, Compositional Hazard Analysis of UML Component and Deployment Models, SAFECOMP, pp.166-179, 2004.
DOI : 10.1007/978-3-540-30138-7_15

&. Goseva-popstojanova, ]. K. Trivedi, K. Goseva-popstojanova, and . Trivedi, Architecture-based approach to reliability assessment of software systems, Performance Evaluation, vol.45, issue.2-3, pp.179-204, 2001.
DOI : 10.1016/S0166-5316(01)00034-7

. Hirel, Reliability and performability modeling using SHARPE, 11th Int. Conf. on Computer Performance Evaluation: Modelling Techniques and Tools, pp.345-349, 2000.
DOI : 10.1007/3-540-46429-8_28
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.91.1445

. Hugues, A Factory to Design and Build Tailorable and Verifiable Middleware, Workshop on Neworked Systems: Realization of Reliable Systems on Top of Unreliable Networked Platforms (Monterey Workshop Series, pp.123-144, 2005.
DOI : 10.1007/978-3-540-71156-8_7
URL : https://hal.archives-ouvertes.fr/hal-01335054

I. Huszerl, A. Majzik, K. Pataricza, M. D. Kosmidis, and . Cin, Quantitative Analysis of UML Statechart Models of Dependable Systems, The Computer Journal, vol.45, issue.3, pp.260-277, 2002.
DOI : 10.1093/comjnl/45.3.260

&. Islam, M. Devarakonda, and . Devarakonda, An essential design pattern for fault-tolerant distributed state sharing, Communications of the ACM, vol.39, issue.10, pp.65-74, 1996.
DOI : 10.1145/236156.236172

. Jarraya, Automatic Verification and Performance Analysis of Time-Constrained SysML Activity Diagrams, 14th Annual IEEE International Conference and Workshops on the Engineering of Computer-Based Systems (ECBS'07), pp.515-522, 2007.
DOI : 10.1109/ECBS.2007.22

. Joshi, Automatic Generation of Static Fault Trees, Workshop on Architecting Dependable Systems of The 37th Annual IEEE/IFIP Int. Conference on Dependable Systems and Networks, 2007.

&. Jouault, ]. F. Kurtev, I. Jouault, and . Kurtev, Transforming Models with ATL, Model Transformaion in Practice Workshop at ACM/IEEE International Conference on Model-driven Engineering Languages and Systems, 2005.
DOI : 10.1007/11663430_14
URL : https://hal.archives-ouvertes.fr/hal-00448120

. Kalnins, Model Transformation Language MOLA, LNCS, vol.3599, pp.62-76, 2005.
DOI : 10.1007/11538097_5
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.102.996

M. Borrel, Fault-tolerant systems dependability. Explicit modeling of hardware and software component-interactions, IEEE Transactions on Reliability, vol.49, issue.4, pp.363-376, 2000.

. Kanoun, Availability of CAUTRA, a subset of the French air traffic control system, IEEE Transactions on Computers, vol.48, issue.5, pp.528-535, 1999.
DOI : 10.1109/12.769435

. Kazman, Experience with performing architecture tradeoff analysis, Proceedings of the 21st international conference on Software engineering, ICSE '99, pp.54-63, 1999.
DOI : 10.1145/302405.302452

C. Kehren, P. Seguin, C. Bieber, C. Castel, J. Bougnol et al., Architecture Patterns for Safe Design, Int. Complex and Safe Systems Engineering, 2004.

&. King, . Pooley-1999-]-p, R. King, and . Pooley, Using UML to Derive Stochastic Petri Net Models, 15th annual UK Performance Engineering Workshop, pp.45-56, 1999.

. Klein, Attribute-Based Architecture Styles, 1st Working IFIP Conf. on Software Architecture, pp.225-244, 1999.
DOI : 10.1007/978-0-387-35563-4_13

. Kwiatkovska, Quantitative Analysis With the Probabilistic Model Checker PRISM, Electronic Notes in Theoretical Computer Science, vol.153, issue.2, pp.5-31, 2005.
DOI : 10.1016/j.entcs.2005.10.030

. Laprie, Definition and analysis of hardware- and software-fault-tolerant architectures, Computer, vol.23, issue.7, pp.39-51, 1990.
DOI : 10.1109/2.56851

. Laprie, Architectural Issues in Software Fault-tolerance, Software Fault-tolerance, pp.47-80, 1995.

&. Laprie, K. Kanoun-laprie, and . Kanoun, Handbook of Software Reliability and System Reliability, Software Reliability Engineering, pp.27-69, 1996.

. Lòpez-grao, Performance Engineering based on UML & SPN's: A software performance tool, 17th Int. Symposium on Computer and Information Sciences, 2002.

. Lu, A Component-Based Approach to Specify Hazards in the Design of Safety-Critical Systems, 3rd IEEE Int. Conf. on Industrial Informatics, pp.680-685, 2005.

&. Majzik, . Bondavalli-1998a-]-i, A. Majzik, and . Bondavalli, Automatic Dependability Modeling of Systems Described in UML, International Symposium on Software Reliability Engineering (ISSRE), 1998.

&. Majzik, . Bondavalli-1998b-]-i, A. Majzik, and . Bondavalli, Automatic Dependability Modeling of Systems Described in UML, Int. Symposium on Software Reliability Engineering (ISSRE), pp.29-30, 1998.

&. Majzik, . Bondavalli-1998c-]-i, A. Majzik, and . Bondavalli, On high-level dependability modeling in HIDE, 1998.

. Majzik, Stochastic Dependability Analysis of System Architecture Based on UML Models, Architecting Dependable Systems, pp.219-244, 2003.
DOI : 10.1007/3-540-45177-3_10

&. Medvidovic, ]. N. Taylor, R. N. Medvidovic, and . Taylor, A classification and comparison framework for software architecture description languages, IEEE Transactions on Software Engineering, vol.26, issue.1, pp.70-93, 2000.
DOI : 10.1109/32.825767
URL : https://hal.archives-ouvertes.fr/hal-00444077

&. Merseguer, ]. J. Campos, J. Merseguer, and . Campos, Software Performance Modeling Using UML and Petri Nets, Lecture Notes in Computer Science 2965, pp.265-289, 2004.
DOI : 10.1007/978-3-540-24663-3_13
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.10.2812

]. P. Mitton and R. Holton, PEPA Performability Modelling using UML statecharts, 16th UK Performance Engineering Workshop, pp.19-33, 2000.

&. Pai, ]. G. Bechta, J. Pai, and . Dugan, Automatic synthesis of dynamic fault trees from UML system models, 13th International Symposium on Software Reliability Engineering, 2002. Proceedings., pp.243-254, 2002.
DOI : 10.1109/ISSRE.2002.1173261

Y. Papadopoulos and J. A. Mcdermid, Hierarchically Performed Hazard Origin and Propagation Studies, pp.139-152, 1999.
DOI : 10.1007/3-540-48249-0_13
URL : http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.105.9849

]. J. Peterson, Petri Net Theory and the Modeling of Systems, 1981.

]. A. Radjenovic and R. Paige, Architecture description languages for high-integrity real-time systems, IEEE Software, vol.23, issue.2, pp.71-79, 2006.
DOI : 10.1109/MS.2006.36

]. B. Randell and J. Xu, The Evolution of the Recovery Block Concept, Software Fault-tolerance, pp.1-21, 1995.

. Rugina, Software Dependability Modeling Using An Industry-Standard Architecture Description Language, 2006.
URL : https://hal.archives-ouvertes.fr/hal-00323983

. Rugina, An Architecture-based Dependability Modeling Framework using AADL, 10th IASTED Int. Conf. on Software Engineering and Applications, pp.222-227, 2006.
DOI : 10.1007/978-3-540-74035-3_2
URL : https://hal.archives-ouvertes.fr/hal-00140407

. Rugina, Modélisation de la sûreté de fonctionnement à partir du langage AADL, 15ème Congrès de Maîtrise des Risques et de Sûreté de Fonctionnement This article was awarded the best research paper award and was also published in the Special Issue Publication of the French Institute for Risk Management and Dependability, 2006.

. Rugina, A System Dependabiliy Modeling Framework using AADL and GSPNs, LNCS, pp.461514-461552, 2007.
DOI : 10.1007/978-3-540-74035-3_2

. Sae-as5506, SAE-AS5506/1, SAE Architecture Analysis and Design Language (AADL) Annex Volume 1, Annex C: AADL Meta-Model and Interchange Formats, 2006.

&. Saldhana, ]. J. Shatz, S. M. Saldhana, and . Shatz, UML Diagrams to Object Petri Net Models: An Approach for Modeling and Analysis, International Conference on Software Engineering and Knowledge Engineering (SEKE), pp.103-110, 2000.

&. Shaw, ]. M. Garlan, D. Shaw, and . Garlan, Characteristics of Higher-Level Languages for Software Architecture, 1994.

. Singhoff, Scheduling and Memory Requirements Analysis with AADL, SIGAda Int. Conf. on Ada, pp.1-10, 2005.

&. Slaby, ]. J. Baker, S. Slaby, and . Baker, Domain-Specific Languages for Enterprise DRE System QoS, IEEE Computer, 2006.

. Sokolsky, Scedulability Analysis of AADL Models, 20th Parallel and Distributed Processing Symposium, 2006.

H. Schilling and . Giese, Design of Self-Managing Dependable Systems with UML and Fault-tolerance Patterns, Workshop on Self-healing Systems, 1st SIGSOFT Workshop on Self-managed Systems, pp.105-109, 2004.

. Trivedi, Techniques and tools for reliability and performance evaluation: Problems and perspectives, 7th International Conference on Modeling Techniques and Tools for Computer Performance Evaluation, (L. N. i. C. Sciences, pp.1-24, 1994.
DOI : 10.1007/3-540-58021-2_1

. Viehl, Formal Performance Analysis and Simulation of UML/SysML Models for ESL Design, Proceedings of the Design Automation & Test in Europe Conference, pp.1-6, 2006.
DOI : 10.1109/DATE.2006.244110

&. Waddington, ]. D. Lardieri, P. Waddington, and . Lardieri, Model-Centric Software Development, IEEE Computer, 2006.

]. M. Wallace, Modular Architectural Representation and Analysis of Fault Propagation and Transformation, Formal foundations of Embedded Systems and Component- Based Software Architectures Workshop, 2005.
DOI : 10.1016/j.entcs.2005.02.051

]. S. Yau and R. C. Cheung, Design of Self-Checking Software, Int. Conf. Reliable Software, pp.450-457, 1975.

V. Zarras and . Issarny, Assessing Software Reliability at the Architectural Level, 4th International Software Architecture Workshop, 2000.

A. Zarras, P. Vassiliadis, and V. Issarny, Model-Driven Dependability Analysis of Web Services, 6th International Symposium on Distributed Objects and Applications, 2004.