As one of the world's most trusted names in high-performance computing, security is essential to NVIDIA’s brand. With cybersecurity risks rising across the board, the company took an ambitious path to examine its software development methodology and find a more measurable solution. Ultimately, it chose to abandon C/C++ and adopt SPARK as its coding language of choice for verifying its most security-critical software and firmware components.
Semiconductor manufacturing has some of the most exacting needs when it comes to performance and reliability, requiring millisecond-level precision and the ability to cost-effectively produce billions of smaller and smaller devices every year. That’s why ITEC, one of the major semiconductor manufacturing equipment and automation providers, chose Ada as its programming language to develop its critical control software.
When IPESOFT was looking to develop its core real-time D2000 industrial automation platform, it knew that choosing the right development language and software tools would be crucial to the success of the platform and the company’s overall business growth. The solution needed to be reliable, secure, high performance, and easy and efficient to maintain over the long-term. Ultimately, IPESOFT chose AdaCore’s GNAT Pro and the Ada language to develop its D2000 platform.
As part of the Tempest future combat air system program, BAE Systems will be using the VxWorks 653 platform, a part of Wind River Studio, and associated DO-178C DAL B safety certification evidence packages, and AdaCore's GNAT Pro Assurance as part of ongoing technology demonstration project work.
How Ada is helping the Laboratory for Atmospheric and Space Physics minimize risk, reduce cost, and assure reliable control of software used for spacecraft and instrument operations.
When SEAKR Engineering decided to upgrade its mission-critical data recorder applications to a new hardware platform, they kept their software in Ada. To help them improve the efficiency and reliability of their Ada code, they upgraded their development environment to GNAT Pro.
Eldorado had already begun using AdaCore’s QGen code generation and model verification tool suite on a cardiac pacemaker as a pilot project. Once they felt they had a mature understanding of how to design their software architecture for IEC62304, and how to use QGen in code generation and verification, they began applying QGen on other projects.
Masten Space Systems
To develop their mission-critical flight control software, Masten chose the Ada and SPARK programming languages, together with AdaCore’s GNAT Pro integrated development environment and the SPARK Pro static analysis tool suite for their XL-1 Lunar Lander. The lander will transport a suite of scientific research payloads to the lunar south pole.
JTEKT demonstrated how to leverage the SPARK Ada language subset and formal methods to facilitate unit testing and verification of the system’s C code to ensure that it was correct.
QinetiQ is looking to SPARK to address software tool obsolescence by modernising the development environment for its Trials Control System (TCS).
Airbus Helicopters (France) has selected the GNAT Pro tool suite and the Ada programming language to develop new software components for the VSR700 prototype project. VSR700 is Airbus Helicopters’ tactical unmanned aerial system (UAS) designed to meet the demanding requirements of global navies and armies in the 21st century.
ELDORADO Research Institute of Brazil
ELDORADO Research Institute of Brazil selected the QGen model-based code generation and verification toolsuite to support research and development of safety-critical medical device software. These applications demand high reliability and currently include a cardiac pacemaker as well as perfusion systems for cardiac surgery and chemotherapy.
ESA selected AdaCore to provide a qualified multitasking solution for spacecraft software development to support multiple ongoing and future ESA projects.
NVIDIA plans to upgrade select security-critical firmware software, rewriting it from C to Ada and SPARK to increase verification efficiencies to achieve compliance with the functional safety standard ISO-26262.
AVIO has selected the GNAT Pro Assurance Ada Development Environment, including the GNATemulator host-based target emulation tool, to implement the on-board software for AVIO’s Vega-C launch vehicle. Sponsored by the European Space Agency (ESA), this safety-critical hard real-time embedded system is the flight software that handles guidance, navigation and control for the Vega-C.
Scandinavian Real Heart
Scandinavian Real Heart AB in Sweden is using a suite of AdaCore software solutions to develop reliable embedded software for its revolutionary Total Artificial Heart.
Laboratory for Atmospheric and Space Physics (LASP)
The University of Colorado’s Laboratory for Atmospheric and Space Physics (LASP) selected the Ada language and the GNAT Pro for the ARM Cortex product for NASA’s Climate Absolute Radiance and Refractivity Observatory (CLARREO) Pathfinder mission.
AdaCore and the University of Nagasaki successfully completed a joint research project for DENSO, Application of Formal Methods to Help Achieve Freedom from Interference, with the goal of simplifying the development of safety-critical automotive applications in an ISO 26262 context.
Thales has developed and verified a qualified autocode generator for critical airborne software. Thales implemented the autocode generator in Ada; the tool takes an XML file and produces source code for an embedded avionics system that will be assessed against the Level B objectives in DO-178C / ED-12C.
MDA, a business unit of Maxar Technologies, selected the GNAT Pro Assurance Ada development environment for the LEON3 target processor, to produce the software for a Ku-Band communication subsystem that will replace the current version. This critical International Space Station (ISS) subsystem has to work reliably over the long term, a requirement that led MDA to maintain Ada as the implementation language.
MHI Aerospace Systems Corporation
MHI Aerospace Systems Corporation (MASC), a member of the Mitsubishi Heavy Industries Group, has selected the QGen toolset to develop the software for the Throttle Quadrant Assembly (TQA) system. This avionics research project is being conducted to meet the Level C objectives in the DO-178C safety standard for airborne software and its DO-331 supplement on Model-Based Development and Verification.
Thales Alenia Space
GNAT Pro Ada cross compilation environment has been successfully used by Thales Alenia Space to develop and verify the critical software embedded on the ExoMars program. Thales Alenia Space implemented in Ada two ExoMars On-Board Software (OBSW) components: one for the Trace Gas Orbiter (TGO) on an ERC32 target, and one for the Entry, Descent and Landing Demonstrator Module (EDM) on a LEON2 target.
UTC Aerospace Systems
CodePeer has been selected by Atlantic Inertial Systems Limited, a UTC Aerospace Systems company in the U.K., for usage on its TERPROM® digital terrain system for military transport aircraft.
GNAT Pro with SQUORE Technology selected by French Agency DGA for a two-year project designed for auditing and certifying military software initiatives.
Vermont Technical College
The GNAT Pro and SPARK language toolsets have been selected for the Lunar IceCube project by Vermont Technical College. Lunar IceCube is a 6-Unit CubeSat mission sponsored by NASA through their NextSTEP initiative. The mission will prospect for water and other lunar volatiles in all forms (solid, liquid, and vapor) from a highly elliptical orbit with a low point of 100 kilometers (60 miles) where the data will be gathered, and a high point of 5,000 kilometers (3,100 miles).
Polytechnic University of Madrid
The GNAT Pro cross-development environment has been selected for the UPMSat-2 UNION satellite project’s real-time on-board and ground control software. The 50kg micro-satellite, scheduled to be launched in Q4 2015, will provide a technology demonstration platform for the university from a sun-synchronous orbit nearly 600 km above Earth.
Smartward has adopted the GNAT Pro development environment, along with several complementary tools to implement a state-of-the-art patient care management system. Ada was chosen as the implementation language because of the benefits in reliability, safety, and security.
Deep Blue Capital
Deep Blue Capital has developed algorithmic trading systems developed in Ada with the GNAT Pro development environment. These systems gather market information and automatically send buy and sell orders with minimal human intervention.
Vermont Technical College
Vermont Technical College successfully launched a lunar cube satellite into earth orbit, where it will remain for about three years to test the systems that will be used for the eventual lunar mission. The CubeSat’s navigation and control software was developed in SPARK/Ada using AdaCore’s GNAT Studio IDE and GNAT Pro compiler and exploiting Altran’s SPARK toolset to prove the absence of run-time errors.
Astrium has selected GNAT Pro development environment and PolyORB middleware toolset for use in the Core Ground System (CGS) - CGS forms the basis to operate the Columbus laboratory, the European contribution to the International Space Station (ISS).
TOYOTA InfoTechnology Center (ITC) Japan selected the SPARK language and SPARK Pro toolset for a research project to develop a vehicle component implementation that can be proven to be free of run-time errors.
Terma A/S has selected the GNAT Pro Safety-Critical development environment to develop onboard software for the Atmosphere-Space Interactions Monitor (ASIM) that will be mounted on the Columbus module of the International Space Station.
Rockwell Collins successfully used SPARK Pro and GNAT Pro High-Security in the development of the SecureOne™ Guard, a high assurance cross domain guard for military tactical systems.
SmartSide has adopted the Ada programming language and GNAT Pro for the implementation of their Smart Devices platform. SmartSide provides Smart Metering and Smart Grid management solutions which are used to optimize Smart Grid networks.
Saab Electronic Defence Systems (Sweden) has adopted the CodePeer static analyzer tool for use on the GIRAFFE project. The GIRAFFE project is a family of land and naval radar-based surveillance and air defense command and control systems.
Eurocopter has chosen the GNAT Pro High-Integrity Edition for development of an ARINC-653 demonstrator for military helicopters. The demonstrator will provide military interfaces and operational functions within a time- and memory-partitioned ARINC-653 architecture
Embraer Defense and Security has selected GNAT Pro as a primary tool set to develop the Operation Flight Program for the AMX Modernization program. GNAT Pro will be used along with Wind River’s VxWorks real-time operating system (RTOS) as the foundation to develop this critical software system on the AMX Modernization effort.
Digicomp, a system engineering and software development company specializing in military and defense applications, has been an AdaCore customer for more than a decade, using GNAT Pro to successfully implement and deploy a variety of mission-critical systems on Sparc Solaris, x86 Solaris, and Linux platforms.
The Mobility Division of Siemens Switzerland Ltd., has selected GNAT Pro, along with the CodePeer static analysis tool, to develop the next generation of its railway control and information system.
The GNAT Pro Development Environment has been selected by Singo Solution, Inc. to build Blaze – one of the largest, most innovative call management systems.
The GNAT Pro High Integrity Edition is being used by Thales to develop onboard instrument software for a unique, satellite-based worldwide location and data collection system dedicated to studying and protecting the environment.
iFACTS is the future of air traffic control. The combination of Praxis’ experience in critical systems engineering and the high integrity of SPARK Ada enabled the development of this vitally important and sophisticated system.
Barco has developed an advanced business jet avionics display system using the AdaCore GNAT Pro Ada development environment. Barco selected the GNAT Pro High Integrity Edition, along with the Traceability Kit, running on Wind River’s VxWorks 653 RTOS in order to meet the highest levels of safety standard DO-178B.
The GNAT Pro High Integrity Edition for DO-178B has been selected by Rockwell Collins to implement key components of an advanced avionics display system that is being deployed on major jet aircraft.
EADS CASA is using the GNAT Pro High-Integrity Edition to implement the data exchange and air-to-ground data links systems for the nEUROn Unmanned Combat Air Vehicle (UCAV) demonstrator.
EADS CASA has chosen AdaCore GNAT Pro High-Integrity Edition for VxWorks653 to develop the device software for its advanced Air Refueling Boom System (ARBS). This software will be certified up to level A of RTCA DO-178B.Read the Case Study (PDF) »
To develop a robust multi-level security workstation, Secunet Security Networks chose the SPARK Pro development environment. The security station concurrently handles information of different security domains, maintains confidentiality and integrity of all processed data, and enforces Multiple Independent Levels of Security (MILS) on a single hardware platform.
Hamilton Sundstrand selected GNAT Pro for the 787 air conditioning control unit. GNAT Pro serves as the Ada development environment for the software running in the Air Conditioning Pack airborne software configuration, which regulates cabin air temperature on the aircraft.
GNAT Pro is being used for the Block 7.0 software upgrade of the C-130J – the second cooperative Block Upgrade initiative that is a true international partnership, with the development costs shared among the participating nations, including the US government. This upgrade includes a new Flight Management System developed cooperatively between GE Aviation, Grand Rapids, Michigan, and Lockheed Martin Aeronautics in Marietta, Georgia.
Thales will use the GNAT Pro High-Integrity Edition for DO-178B and the Ada 2005 language to build the Air Data Inertial Reference Unit (ADIRU) for the A350 XWB (Xtra Wide-Body). The ADIRU provides precise in-flight positioning information, and the new system will therefore need to be certified to the highest safety levels. It will meet Level A of the DO-178B standard and use ARINC 653 multi-partition operating system MACS2.
Sentinel-1 is the first of five families of satellites being developed for the Global Monitoring for Environment and Security (GMES) program. GMES, a joint initiative of the European Commission and the European Space Agency (ESA), is designed to support a sustainable European information network by monitoring, recording and analyzing environmental data and events around the globe. Astrium in the UK will use GNAT Pro to implement the Application Software for the SAR Electronics Sub-system which is used to control Sentinel-1’s C-band Synthetic Aperture Radar (SAR).
This case study describes Thales UK’s state-of-the-art non-hull-penetrating optronic mast for the United Kingdom Royal Navy’s new Astute-class submarines, which provides greater flexibility in boat design and improved surface visibility while reducing the probability of detection. The optronic mast is powered by AdaCore partner, Wind River’s VxWorks mission-critical real-time operating system (RTOS) submarine.Read the Case Study »
The User Request Evaluation Tool developed by a team that included Lockheed Martin and AdaCore is conflict-detection technology that is said to save time, fuel, and money while also helping to ensure safe aircraft separation.Read the article (PDF) »
Raytheon has delivered the Ship Self-Defense System (SSDS) Mk 2 using GNAT Pro for LynxOS within its multi-language software development environment. SSDS Mk 2 is a combat system that integrates and coordinates the sensors and weapons systems aboard a US Naval vessel to provide a coherent tactical picture for situational awareness, command and controls, and quick-reaction self-defense.Read Raytheon’s SDSS story »
AAI Services Corporation utilized GNAT Pro as part of an overall upgrade to the U.S. Air Force T25 Simulator for Electronic Combat Training (SECT) system. The T25 SECT system is a software-based training aid that uses interactive combat laboratory exercises and simulated training missions to teach the principles of electronic countermeasures.
In partnership with Wind River, AdaCore’s technology will be used on the 787’s Common Core System, provided by Smiths Aerospace, which is the backbone of the airplane’s computers, networks and interfacing electronics. The 787 Common Core System comprises approximately 80 to 100 applications running simultaneously which will control many of the airplane’s avionics and utilities functions.
BAE Systems are using the GNAT Pro development environment for host Ada compilation in the development of software for the Eurofighter’s mission computers.Read the Case Study (PDF) »
The U.S. Navy is using a new ejection seat sequencer that will catapult a pilot and co- pilot (and the seats) out of a damaged F-18, F-14, or T-45 aircraft within 0.2 seconds from the time the ejection handle is pulled.Read the case study (PDF) »
MacDonald Dettwiler (MDA) chose open-source GNAT Ada 95 from Ada Core Technologies to develop control software for the Mobile Servicing System (MSS), an essential com- ponent of the International Space Station (ISS).Read the Case Study (PDF) »