Complete Model-Based Equivalence Class Testing for the ETCS Ceiling Speed Monitor

Cécile Braunstein, Anne Elisabeth Haxthausen, Wen-ling Huang, Felix Hübner, Jan Peleska, Uwe Schulze, Linh Hong Vu

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review

1237 Downloads (Pure)


In this paper we present a new test model written in SysML and an associated blackbox test suite for the Ceiling Speed Monitor (CSM) of the European Train Control System (ETCS). The model is publicly available and intended to serve as a novel benchmark for investigating new testing theories and comparing the capabilities of modelbased test automation tools. The CSM application inputs velocity values from a domain which could not be completely enumerated for test purposes with reasonable e_ort. We therefore apply a novel method for equivalence class testing that { despite the conceptually in_nite cardinality of the input domains { is capable to produce _nite test suites that are complete (i.e. sound and exhaustive) for a given fault model. In this paper, an overview of the model and the equivalence class testing strategy is given, and tool-based evaluation results are presented. For the technical details we refer to the published model and a technical report that is also available on the same website.
Original languageEnglish
Title of host publicationFormal Methods and Software Engineering : Proceedings of the 16th International Conference on Formal Engineering Methods, ICFEM 2014
Publication date2014
ISBN (Print)978-3-319-11736-2
ISBN (Electronic)978-3-319-11737-9
Publication statusPublished - 2014
EventICFEM 2014 - Meliá Hotel, Luxembourg, Luxembourg
Duration: 3 Nov 20147 Nov 2014
Conference number: 16


ConferenceICFEM 2014
LocationMeliá Hotel
Internet address
SeriesLecture Notes in Computer Science


  • Model-based testing
  • Equivalence class partition testing
  • SysML
  • European Train Control System ETCS
  • Ceiling Speed Monitoring

Fingerprint Dive into the research topics of 'Complete Model-Based Equivalence Class Testing for the ETCS Ceiling Speed Monitor'. Together they form a unique fingerprint.

Cite this