Testing proper mitigation in safety-critical systems: An aerospace Launch application

In the aerospace domain, defects in mitigating failures can have very high costs. This makes it imperative to have systematic testing approaches for making sure that failure mitigations work properly. This paper describes a model-based testing approach that targets mitigations of system failures. It includes models of the system, of possible failures, and required mitigations. It uses all three to construct a mitigation test suite. We apply the approach to a Launch vehicle.