26th Annual NASA Goddard Software Engineering Workshop Mars Polar Lander Fault Identification Using Model-based Testing Greenbelt, Maryland November 27-November 29 ISBN: 0-7695-1456-1
This paper describes the application of the Test Automation Framework (TAF) on the Mars Polar Lander (MPL) software. The premature shutdown of the descent engine on the MPL spacecraft is believed to be the most likely cause for the mission failure. It is believed that the engine shutdown occurred when the three landing legs were extended into their deployed position. This event created an unanticipated transient touchdown indication from the legs, causing the software to inadvertently shutdown the descent engines prior to reaching the surface of Mars. This spurious indication should have been ignored by the Touchdown Monitor (TDM) software, but due to a design flaw, was actually "latched," thus causing the premature engine shutdown. The TAF approach was used to model the TDM software requirements. The associated TAF tools generated tests that identified a potential TDM fault.
Index Terms:
Mars Polar Lander, model-based testing, test automation, test generation
Citation:
Mark Blackburn, Robert Busser, Aaron Nauman, Robert Knickerbocker, Richard Kasuda, "Mars Polar Lander Fault Identification Using Model-based Testing," sew, pp.128, 26th Annual NASA Goddard Software Engineering Workshop, 2001 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||