Date: June 12 - 16, 2017
Location: avendi Hotel Griebnitzsee, Potsdam-Babelsberg (next to Berlin) | Germany
Training language: English

To registration form

Download all information as a PDF file

Model-based development of embedded systems is a mature technology to create technical software applications with high quality and efficiency. The MES Summer School "Introduction to Model-based Software Development of Embedded Systems" gives a comprehensive introduction to this technology applied in the automotive and automation industry, among others.

Starting from elicitation and management of requirements, through the definition of architectures and the design of a model structure, the program provides an introduction to modeling. Particular attention will be paid to static and dynamic quality assurance methods to ensure that the models are the source of high quality software suitable for safety-critical systems.

By applying all relevant process steps during our hands-on sessions you will face all the typical challenges of modeling safety-critical systems. This will prepare you for the application of relevant process steps to your own projects. The small training group allowing individual supervision, the experienced training team, and a relaxed atmosphere will enable you to learn all that is necessary for safeguarding your safety-critical embedded software.

To complete the picture, we will present recommendations of applicable standards in the field such as IEC 61508, ISO 26262, and ASPICE. The MES Summer School provides an easy entry, as well as a comprehensive overview on model-based development of embedded systems that is relevant to everybody.

Target audience

The workshop is designed for developers, testers, quality managers, project managers, and team leaders, whose focus is model-based development of safety-critical embedded software using MATLAB®/Simulink® in combination with Embedded Coder® or dSPACE TargetLink®. Only basic modeling knowledge with Simulink® and Stateflow® is assumed.

  • Introduction to model-based development of embedded software in line with Simulink® tool chains
  • Comprehensive development process from requirements acquisition, architectural design, function development, and implementation, as well as target integration
  • Full coverage of quality assurance activities required for safety-critical systems
  • Hands-on experience with real-world models and tools
  • Alignment with relevant standards, i.e. ISO 26262 (functional safety), ISO 250xx (SW product quality), and ASPICE


Dr. Hartmut Pohlheim

Dr. Hartmut Pohlheim Portrait

Hartmut Pohlheim is the strong backbone of our technology development. He is CTO out of firm conviction and manages customer projects as well as our in-house software development team with an unwavering commitment to the highest quality and efficiency. Our customers value his inexhaustible technical knowledge and his pragmatic, hands-on approach to challenging technology questions. Testers fear him for his zero tolerance policy when it comes to errors.

Dr. Heiko Dörr

Dr. Heiko Dörr Portrait

Heiko Dörr was appointed CEO of Model Engineering Solutions (MES) in Berlin in January 2016, after years of experience as a managing partner. A trailblazer of model-based development from the very beginning, he strives to open new fields for its application. He ensures that the competences within the company are well-aligned to drive quality in all areas in the right direction.

Sophia Kohle

Sophia Kohle Portrait

Sophia Kohle is an expert of check and guideline development for MXAM. As Product Manager of check development, Ms Kohle is responsible for the development of model checks to cover ISO 26262 requirements. Ms Kohle attends to client projects when it comes to implementation of company-specific guidelines and checks in MXAM.


Martin Hill

Martin Hill PortraitMartin Hill is Product Manager for MES Test Manager® (MTest) and responsible for projects in the fields of quality assurance, modeling, and model checking as well. Mr. Hill studied aerospace engineering and now focuses on automotive model-based testing, as well as successfully managing test projects.



Agenda of the MES Summer School


AGENDA - Day 1

11 a.m.Welcome Address
  • Collection of experience and expectations
  • Introduction to the course
  • 12 a.m.Lunch
    1:30 p.m.Overview: Model-based software development with Simulink
  • Foundations of model-based development
  • Overview of development and quality assurance activities
  • Characteristics of ISO 26262-compliant development
  • 2:15 p.m.Approaches and challenges to the development of automated driving systems
    3 p.m.Overview: Introduction to sample application
    3:30 p.m.Coffee break
    4 p.m.Reference (ISO 26262-compliant) process for model-based development
  • Reference workflow
  • Process phases and work products
  • Process manuals and developer guides
  • 4:30 p.m.Principles of requirements management
  • Definitions and classification in the model-based development process
  • Requirement types and attributes
  • Requirement specifications vs. functional specifications
  • Hierarchy of specifications and requirements
  • Writing good requirements
  • Determination of system under development
  • Structuring specifications
  • Features of requirements
  • Requirements traceability
  • 5:15 p.m.Hands-on
  • Creation of requirements
  • Peer review of stated requirements
  • 6 p.m.End of Training-Day 1

    AGENDA - Day 2

    9 a.m.Model and software architecture design
  • Introduction: model architecture vs. software architecture
  • Designing ISO 26262-compliant software architectures
  • Simulink®/TargetLink® design patterns for safety-critical software
  • Model partitioning and encapsulation of safety-critical modules
  • Established software architectures for Simulink® and TargetLink®
  • 9:45 a.m.Software architecture of the sample application
    10:30 a.m.Coffee break
    11 a.m. Modeling embedded software in Simulink
  • Simulink modeling environment
  • Composition and structure of environment and controller models
  • Parametrization of Simulink models
  • 12 p.m.Hands-on
  • Creating Simulink model structure
  • 12:45 p.m.Lunch
    2:15 p.m. Modeling of embedded software with Stateflow
  • Introduction to the concept of the finite-state machine
  • Control structures and flowcharts
  • Stateflow Design Patterns
  • 3:15 p.m.Hands-on
  • Creating a Stateflow chart
  • 4 p.m.Coffee break
    4:30 p.m. Hands-on workshop: Creating and integrating models
  • Integration of individually created models
  • Model simulation
  • 5:30 p.m.Past and future challenges to model-based development
    6 p.m.End of Training-Day 2

    AGENDA - Day 3

    9 a.m.Safeguarding model quality with model testing
  • ISO 26262 requirements in the testing process
  • Safeguarding safety requirements
  • Test goals on different testing levels
  • Safeguarding functional properties of model and code
  • Regression testing and back-to-back testing, MiL – SiL – PiL
  • Automatic test evaluation with test assessments
  • 9:45 a.m. Requirements-based test case creation
  • How are test cases built? What are the typical foundational elements?
  • How does the equivalence class method work and how can it help?
  • Creating test sequences with the classification tree method
  • Parameter- and variant-dependent test specifications
  • Definition of test groups and test sequences with MTCD
  • Specification functions in MTCD (functions, synchronous, asynchronous)
  • Parameter handling with MTCD
  • Best practices for test specifications
  • 10:30 a.m.Coffee break
    11 a.m.Hands-on workshop
  • Creating test sequences
  • Executing test sequences
  • Improving models
  • 12:30 p.m.Lunch
    2:30 p.m. Changes of automated driving
    2:30 p.m.Coffee break
    3 p.m.

    End of Training-Day 3

    Excursion to Berlin

    AGENDA - Day 4

    9 a.m.The TargetLink development environment
  • TargetLink Blockset
  • Data Dictionary
  • Data types, classes, scaling, and fixed-point arithmetic
  • Interfaces (signals and buses)
  • TargetLink functions
  • Conversion of example models
  • 10:30 a.m.Coffee break
    11 a.m. Hands-on: Implementation and code generation with TargetLink
  • Enhancing Simulink/Stateflow models with implementation information
  • Code generation
  • Code review
  • Software-in-the-Loop (SiL) simulation
  • 12:30 p.m.Lunch
    2 p.m.Regression and back-to-back comparison
  • Scope (MiL vs. SiL vs. PiL, model simulation vs. measurement data)
  • Combination of back-to-back and regression testing with test assessments
  • Transformation of output signals into reference signals
  • 2:45 p.m.Hands-on: Regression and back-to-back comparison
  • Automated test execution for MiL/SiL/PiL
  • Executing and documenting the test evaluation in the report
  • Defining tolerances (amplitude and time)
  • 3:30 p.m.Coffee break
    4 p.m.Safeguarding model quality with modeling guidelines
  • Overview of modeling guidelines
  • Modeling guidelines for ISO 26262-compliant modeling
  • Automated checks of modeling guidelines
  • 5 p.m.Hands-on: Static analysis of model quality
  • Improvements to models
  • 5:30 p.m.ISO 26262-compliant development process
  • Reference workflow
  • Process phases and work products
  • Process manuals and developer guides
  • 6 p.m.End of Training-Day 4

    AGENDA - Day 5

    9 a.m. Model and code coverage in the model test
  • Model coverage for all MiL test platforms
  • Code coverage
  • 9:45 a.m. Hands-on: Increasing model/code coverage via structure-based test cases
  • Interpretation and evaluation of coverage reports
  • 10:30 a.m.Coffee break
    11 a.m.Overview of results and progress
  • Are requirements correctly implemented in the test object?
  • Assessing the quality of the test results (test catalog, test report)
  • When am I finished with development and quality assurance?
  • 11:45 a.m. Hands-on: Maintaining quality
  • What does workflow efficiency look like in case of changes in the requirement and functional specifications?
  • Modifying test specifications and test assessments after requirement changes
  • Overview of development and project quality
  • 12:30 p.m.Lunch
    2 p.m. ASPICE and model-based development
    2:30 p.m. Overall assessment of achievements
    3:30 p.m.Summary and closing of the event
    4 p.m.Coffee break
    4:30 p.m.End of Training-Day 5