<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04668016</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-13T04:36:49+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Certification of avionic software based on machine learning: the case for formal monotony analysis</title>
            <author role="aut">
              <persName>
                <forename type="first">Mélanie</forename>
                <surname>Ducoffe</surname>
              </persName>
              <idno type="halauthorid">1057476-0</idno>
              <affiliation ref="#struct-254102"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Christophe</forename>
                <surname>Gabreau</surname>
              </persName>
              <idno type="halauthorid">2174870-0</idno>
              <affiliation ref="#struct-254102"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ileana</forename>
                <surname>Ober</surname>
              </persName>
              <email type="md5">fe8cbb977c3867524f311bc510b22d0d</email>
              <email type="domain">irit.fr</email>
              <idno type="idhal" notation="numeric">1188463</idno>
              <idno type="halauthorid" notation="string">676579-1188463</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-9338-8187</idno>
              <idno type="IDREF">https://www.idref.fr/059569972</idno>
              <affiliation ref="#struct-1001836"/>
              <affiliation ref="#struct-217752"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Iulian</forename>
                <surname>Ober</surname>
              </persName>
              <email type="md5">ec3d790ccd94e0e0eaab23b2b2ccf31e</email>
              <email type="domain">isae.fr</email>
              <idno type="idhal" notation="string">iulian-ober</idno>
              <idno type="idhal" notation="numeric">735145</idno>
              <idno type="halauthorid" notation="string">8201-735145</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-9057-1883</idno>
              <affiliation ref="#struct-1001836"/>
              <affiliation ref="#struct-1195667"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Eric Guillaume</forename>
                <surname>Vidot</surname>
              </persName>
              <idno type="halauthorid">3117373-0</idno>
              <affiliation ref="#struct-254102"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>OPEN SCIENCE ISAE-SUPAERO</forename>
                <surname>OSIS</surname>
              </persName>
              <email type="md5">927c742c7c34cb86d734bd9553a032bf</email>
              <email type="domain">isae-supaero.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2024-09-09 14:09:50</date>
              <date type="whenModified">2025-10-22 18:04:09</date>
              <date type="whenReleased">2024-09-09 14:24:51</date>
              <date type="whenProduced">2024</date>
              <date type="whenEndEmbargoed">2024-09-12</date>
              <ref type="file" target="https://hal.science/hal-04668016v1/document">
                <date notBefore="2024-09-12"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04668016v1/file/16564-Ducoffe_15142.pdf" id="file-4668016-4079236">
                <date notBefore="2024-09-12"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1430559">
                <persName>
                  <forename>OPEN SCIENCE ISAE-SUPAERO</forename>
                  <surname>OSIS</surname>
                </persName>
                <email type="md5">927c742c7c34cb86d734bd9553a032bf</email>
                <email type="domain">isae-supaero.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04668016</idno>
            <idno type="halUri">https://hal.science/hal-04668016</idno>
            <idno type="halBibtex">ducoffe:hal-04668016</idno>
            <idno type="halRefHtml">&lt;i&gt;International Journal on Software Tools for Technology Transfer&lt;/i&gt;, 2024, 26 (2 - Special Issue: FMICS 2022), pp.189--205. &lt;a target="_blank" href="https://dx.doi.org/10.1007/s10009-024-00741-6"&gt;&amp;#x27E8;10.1007/s10009-024-00741-6&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">International Journal on Software Tools for Technology Transfer, 2024, 26 (2 - Special Issue: FMICS 2022), pp.189--205. &amp;#x27E8;10.1007/s10009-024-00741-6&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-4668016-4079236"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-TLSE2">Université Toulouse 2</idno>
            <idno type="stamp" n="UNIV-TLSE3">Université de Toulouse</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="UT1-CAPITOLE">Université Toulouse 1 Capitole</idno>
            <idno type="stamp" n="FONISEN">Fédération de recherche ENAC ISAE-SUPAERO ONERA</idno>
            <idno type="stamp" n="IRIT">IRIT - Institut de Recherche en Informatique de Toulouse</idno>
            <idno type="stamp" n="IRIT-ARGOS" corresp="IRIT">Advancing Rigorous Software and System Engineering</idno>
            <idno type="stamp" n="FONISEN-SCALP" corresp="FONISEN"> SCALP -  Systèmes Critiques A Logiciel Prépondérant</idno>
            <idno type="stamp" n="IUT-BLAGNAC" corresp="UNIV-TLSE2">IUT Blagnac</idno>
            <idno type="stamp" n="IRIT-FSL" corresp="IRIT">Fiabilité des Systèmes et des Logiciels</idno>
            <idno type="stamp" n="TOULOUSE-INP">Toulouse - INP</idno>
            <idno type="stamp" n="UNIV-UT3">Université Toulouse 3</idno>
            <idno type="stamp" n="UT3-INP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="UT3-TOULOUSEINP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="ISAE-SUPAERO">Institut Supérieur de l'Aéronautique et de l'Espace</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Certification of avionic software based on machine learning: the case for formal monotony analysis</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Mélanie</forename>
                    <surname>Ducoffe</surname>
                  </persName>
                  <idno type="halauthorid">1057476-0</idno>
                  <affiliation ref="#struct-254102"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Christophe</forename>
                    <surname>Gabreau</surname>
                  </persName>
                  <idno type="halauthorid">2174870-0</idno>
                  <affiliation ref="#struct-254102"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ileana</forename>
                    <surname>Ober</surname>
                  </persName>
                  <email type="md5">fe8cbb977c3867524f311bc510b22d0d</email>
                  <email type="domain">irit.fr</email>
                  <idno type="idhal" notation="numeric">1188463</idno>
                  <idno type="halauthorid" notation="string">676579-1188463</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-9338-8187</idno>
                  <idno type="IDREF">https://www.idref.fr/059569972</idno>
                  <affiliation ref="#struct-1001836"/>
                  <affiliation ref="#struct-217752"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Iulian</forename>
                    <surname>Ober</surname>
                  </persName>
                  <email type="md5">ec3d790ccd94e0e0eaab23b2b2ccf31e</email>
                  <email type="domain">isae.fr</email>
                  <idno type="idhal" notation="string">iulian-ober</idno>
                  <idno type="idhal" notation="numeric">735145</idno>
                  <idno type="halauthorid" notation="string">8201-735145</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-9057-1883</idno>
                  <affiliation ref="#struct-1001836"/>
                  <affiliation ref="#struct-1195667"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Eric Guillaume</forename>
                    <surname>Vidot</surname>
                  </persName>
                  <idno type="halauthorid">3117373-0</idno>
                  <affiliation ref="#struct-254102"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">14782</idno>
                <idno type="issn">1433-2779</idno>
                <idno type="eissn">1433-2787</idno>
                <title level="j">International Journal on Software Tools for Technology Transfer</title>
                <editor>International Journal on Software Tools for Technology Transfer</editor>
                <imprint>
                  <publisher>Springer Verlag</publisher>
                  <biblScope unit="volume">26</biblScope>
                  <biblScope unit="issue">2 - Special Issue: FMICS 2022</biblScope>
                  <biblScope unit="pp">189--205</biblScope>
                  <date type="datePub">2024</date>
                  <date type="dateEpub">2024-03-12</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/s10009-024-00741-6</idno>
              <ref type="publisher">https://link.springer.com/article/10.1007/s10009-024-00741-6</ref>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Machine learning</term>
                <term xml:lang="en">Neural network</term>
                <term xml:lang="en">Certification</term>
                <term xml:lang="en">Formal verification</term>
                <term xml:lang="en">Monotony</term>
                <term xml:lang="en">Machine learning</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-lg">Computer Science [cs]/Machine Learning [cs.LG]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The use of machine learning (ML) in airborne safety-critical systems requires new methods for certification, as the current standards and practices were defined and refined over decades with classical programming in mind and do not support this new development paradigm. This article provides an overview of the main challenges to the demonstration of compliance with regulation requirements raised by the use of ML, and focuses on one particular case where the formal verification may become mandatory in future regulations, which is the verification of (partial) monotony properties. For this case, we propose a method to evaluate the monotony property using Mixed Integer Linear Programming (MILP). Contrary to the existing literature, our analysis provides a lower and upper bound of the space volume where the property does not hold, that we denote ``Non-Monotonic Space Coverage''. This work has several advantages: (i) our formulation of the monotony property works on discrete inputs, (ii) the iterative nature of our algorithm allows for refining the analysis as needed, and (iii) from an industrial point of view, the results of this evaluation are valuable to the aeronautical domain where it can support the certification demonstration. We applied this method to an avionic case study (braking distance estimation using a neural network) where the verification of the monotony property is of paramount interest from a safety perspective.&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-254102" status="VALID">
          <orgName>Airbus Operation S.A.S.</orgName>
          <desc>
            <address>
              <addrLine>Site Industriel316 route de Bayonne31060TOULOUSE Cedex 9Midi-Pyrénées</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.airbus.com/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-55697" type="direct"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-1001836" status="OLD">
          <orgName>Advancing Rigorous Software and System Engineering</orgName>
          <orgName type="acronym">IRIT-ARGOS</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>Institut de recherche en informatique de Toulouse - IRIT118 Route de Narbonne 31062 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.irit.fr/departement/fiabilite-des-systemes-et-des-logiciels/equipe-argos/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-34499" type="direct"/>
            <relation active="#struct-81148" type="indirect"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-217752" type="indirect"/>
            <relation name="UMR5505 / URA1399" active="#struct-441569" type="indirect"/>
            <relation active="#struct-448187" type="indirect"/>
            <relation active="#struct-1149079" type="indirect"/>
            <relation name="FED4171" active="#struct-217752" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-217752" status="OLD">
          <idno type="IdRef">026404672</idno>
          <idno type="ISNI">0000000121617331</idno>
          <idno type="ROR">https://ror.org/02v6kpv12</idno>
          <idno type="Wikidata">Q1273188</idno>
          <orgName>Université Toulouse III - Paul Sabatier</orgName>
          <orgName type="acronym">UT3</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 route de Narbonne - 31062 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse3.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="department" xml:id="struct-1195667" status="VALID">
          <orgName>Fédération ENAC ISAE-SUPAERO ONERA</orgName>
          <date type="start">2024-01-01</date>
          <desc>
            <address>
              <addrLine>31000 Toulouse</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-82720" type="direct"/>
            <relation active="#struct-300024" type="direct"/>
            <relation active="#struct-380071" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-55697" status="VALID">
          <orgName>Airbus [France]</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.airbus.com/company/worldwide-presence/airbus-in-france/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-34499" status="OLD">
          <idno type="IdRef">030947448</idno>
          <idno type="ISNI">0000000121927225</idno>
          <idno type="RNSR">199511949P</idno>
          <idno type="ROR">https://ror.org/01rx4qw44</idno>
          <orgName>Institut de recherche en informatique de Toulouse</orgName>
          <orgName type="acronym">IRIT</orgName>
          <date type="start">1990-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 Route de Narbonne, F-31062 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.irit.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-81148" type="direct"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-217752" type="direct"/>
            <relation name="UMR5505 / URA1399" active="#struct-441569" type="direct"/>
            <relation active="#struct-448187" type="direct"/>
            <relation active="#struct-1149079" type="direct"/>
            <relation name="FED4171" active="#struct-217752" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-81148" status="VALID">
          <idno type="IdRef">026404354</idno>
          <idno type="ISNI">0000000121902837</idno>
          <idno type="ROR">https://ror.org/0443n9e75</idno>
          <orgName>Université Toulouse Capitole</orgName>
          <orgName type="acronym">UT Capitole</orgName>
          <date type="start">1970-01-01</date>
          <desc>
            <address>
              <addrLine>2 rue du Doyen-Gabriel-Marty - 31042 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ut-capitole.fr/</ref>
          </desc>
          <listRelation>
            <relation name="443875" active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-443875" status="VALID">
          <idno type="ROR">https://ror.org/017tgbk05</idno>
          <orgName>Communauté d'universités et établissements de Toulouse</orgName>
          <orgName type="acronym">Comue de Toulouse</orgName>
          <desc>
            <address>
              <addrLine>41 Allée Jules Guesde, 31000 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-toulouse.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-116256" status="VALID">
          <idno type="IdRef">026403994</idno>
          <idno type="ROR">https://ror.org/04ezk3x31</idno>
          <orgName>Université Toulouse - Jean Jaurès</orgName>
          <orgName type="acronym">UT2J</orgName>
          <date type="start">1971-01-01</date>
          <desc>
            <address>
              <addrLine>5 allées Antonio Machado - 31058 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse2.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-448187" status="VALID">
          <idno type="IdRef">026388820</idno>
          <idno type="ISNI">0000000121766169</idno>
          <idno type="ROR">https://ror.org/033p9g875</idno>
          <orgName>Institut National Polytechnique (Toulouse)</orgName>
          <orgName type="acronym">Toulouse INP</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inp-toulouse.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-1149079" status="OLD">
          <orgName>Toulouse Mind &amp; Brain Institut</orgName>
          <orgName type="acronym">TMBI</orgName>
          <date type="start">2021-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>CHU Purpan, Pavillon Baudot, 31059 Toulouse cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.tmbi.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation name="FED4171" active="#struct-217752" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-82720" status="VALID">
          <idno type="ROR">https://ror.org/04gyj6s21</idno>
          <orgName>Institut Supérieur de l'Aéronautique et de l'Espace</orgName>
          <orgName type="acronym">ISAE-SUPAERO</orgName>
          <desc>
            <address>
              <addrLine>ISAE - 10 av. Edouard Belin - BP 54032 - 31055 TOULOUSE Cedex 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.isae-supaero.fr/fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300024" status="VALID">
          <idno type="ROR">https://ror.org/005y2ap84</idno>
          <orgName>ONERA</orgName>
          <desc>
            <address>
              <addrLine>Office National d’Études et de Recherches Aéronautiques29, avenue de la Division Leclerc - BP 72 - 92322 CHATILLON CEDEX</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.onera.fr/fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-380071" status="VALID">
          <idno type="IdRef">027771881</idno>
          <idno type="ISNI">0000 0001 2112 1176 </idno>
          <idno type="RNSR">201923158U</idno>
          <idno type="ROR">https://ror.org/022zdgq74</idno>
          <orgName>Ecole Nationale de l'Aviation Civile</orgName>
          <orgName type="acronym">ENAC</orgName>
          <desc>
            <address>
              <addrLine>7 avenue Edouard BelinCS 5400531055 Toulouse cedex 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.enac.fr</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>