Design and Development Methodology for Resilient Cyber-Physical Systems

Mission-critical cyber-physical systems must be resilient to all classes of failures, both hardware and software components. Failures affecting a systempsilas ability to accurately control its physical actions are of special concern, requiring a meta-level monitoring and reaction ability to enable high-performance nominal and safe post-failure operation. This paper addresses these challenges by unifying formal software engineering with a suite of feedback control laws and efficient resource monitoring within a comprehensive design and development methodology.