Model coverage as a quality measure and teaching Tool for embedded control system design

To systematically establish that a design satisfies its requirements, the design model is analyzed with respect to a set of test cases to establish a measure of so-called model coverage. If less than 100% coverage of model behavior is achieved, the design contains unintended functionality or there may be lacking test cases, which in turn may be because of missing requirements. This paper presents the use of model coverage in education, illustrated by the design of an aircraft attitude control system. Model coverage provides a measure of quality of a design task performed by a student while it can help obtain insight into details of critical behavior of a design and how to correct problems discovered.