Model-Based Passive Testing of Safety-Critical Components

In model-based testing (MBT, also known as “specification-based” testing, or “modeldriven” testing: MDT), the test cases, according to which a hardware or software unit (module, component) shall be tested after its development or implementation, are typically not created “ab initio.” They are derived by some means of formal reasoning from a formal model, the test model, which is more or less closely related to the specification model of that unit, from which its implementation had been derived (Augusto et al. 2004). This principle is known now since about 20 years; see for example Bochmann et al. (1989) or Richardson et al. (1989). This general idea behind all these approaches is sketched below in Figure 16.1.