Engineering Air Traffic Control Systems with a Model-Driven Approach

Testing software in Air Traffic Control (ATC) systems costs much more than building them. This is basically true in every domain producing software-intensive critical systems. Software engineers strive to find methodological and processlevel solutions to balance these costs, and to better distribute verification efforts along all the development phases. There is considerable interest in applying model-driven approaches in the critical systems engineering field. Kept promises and failed expectations of model-driven engineering are still debated today; we report our experience in trying to take the model-driven best achievements and, at the same time, to fill its lacks in the considered industrial context.