Software is the crux of many commercial, industrial and military systems. The software systems need to be very reliable especially in case of safety critical systems. Unmanned Aerial Vehicle (UAV) and manned aircraft are safety critical systems and hence failures related to software or software-hardware interaction leads to huge problems. The software systems need to be certified before they are deployed. Even after being certified several accidents and incidents have occurred and are occurring. The software errors can occur during any phase of software development. The reliability of the software is enhanced using the verification process. Runtime monitoring has various advantages over testing and model checking. Hence this thesis work explores runtime monitoring of UAV. The runtime monitoring shall verify the run of the current system state. The runtime monitoring shall monitor the health of the UAV and shall report to the operator about its status. The software faults and errors if not prevented shall lead to software failure. UAV lacks the situational awareness due to absence of pilot onboard. This motivated to use runtime monitor to enhance the situation awareness. The runtime monitor shall detect the software errors and avoid failures. This monitor shall also enhance the situational awareness of the remote operator. The runtime monitor that enhance situation awareness shall not only be applicable to specific UAV but this shall be applicable to all the UAV’s. Hence this work provides an independent Generic Runtime Monitor (GRM) to enhance the situation awareness. The runtime monitor has various methods but using formal specifications in specific using Linear Temporal Logic(LTL) to generate monitor is considered in this work. Runtime monitoring makes UAV more safe and at the same time reduces the costs as it verifies only the current run of the system state by providing a detection of critical errors. The situation awareness includes functional and environmental states that remote pilot shall not be aware of. The architecture plays vital role for the system design. GRM architecture is one such architecture which chalks out the overall independent system design for the runtime monitoring of the UAV system. This architecture is an extensible one. The generic requirements were elicited from different sources such as Aircraft Incidents and Accidents, Boeing Aero Magazine, Autonomous Rotorcraft Testbed for Intelligent Systems (ARTIS) requirements, generic Autonomy Levels for Unmanned Rotorcraft Systems (ALFURS) framework etc. The situation awareness can be categorized into three levels namely perception, comprehension and projection. The requirements were elicited for all the three levels of situation awareness. These requirements further formalized using temporal logics. The formalized requirements further translated into state automaton automatically.

Software is the crux of many commercial, industrial and military systems. The software systems need to be very reliable especially in case of safety critical systems. Unmanned Aerial Vehicle (UAV) and manned aircraft are safety critical systems and hence failures related to software or software-hardware interaction leads to huge problems. The software systems need to be certified before they are deployed. Even after being certified several accidents and incidents have occurred and are occurring. The software errors can occur during any phase of software development. The reliability of the software is enhanced using the verification process. Runtime monitoring has various advantages over testing and model checking. Hence this thesis work explores runtime monitoring of UAV. The runtime monitoring shall verify the run of the current system state. The runtime monitoring shall monitor the health of the UAV and shall report to the operator about its status. The software faults and errors if not prevented shall lead to software failure. UAV lacks the situational awareness due to absence of pilot onboard. This motivated to use runtime monitor to enhance the situation awareness. The runtime monitor shall detect the software errors and avoid failures. This monitor shall also enhance the situational awareness of the remote operator. The runtime monitor that enhance situation awareness shall not only be applicable to specific UAV but this shall be applicable to all the UAV’s. Hence this work provides an independent Generic Runtime Monitor (GRM) to enhance the situation awareness. The runtime monitor has various methods but using formal specifications in specific using Linear Temporal Logic(LTL) to generate monitor is considered in this work. Runtime monitoring makes UAV more safe and at the same time reduces the costs as it verifies only the current run of the system state by providing a detection of critical errors. The situation awareness includes functional and environmental states that remote pilot shall not be aware of. The architecture plays vital role for the system design. GRM architecture is one such architecture which chalks out the overall independent system design for the runtime monitoring of the UAV system. This architecture is an extensible one. The generic requirements were elicited from different sources such as Aircraft Incidents and Accidents, Boeing Aero Magazine, Autonomous Rotorcraft Testbed for Intelligent Systems (ARTIS) requirements, generic Autonomy Levels for Unmanned Rotorcraft Systems (ALFURS) framework etc. The situation awareness can be categorized into three levels namely perception, comprehension and projection. The requirements were elicited for all the three levels of situation awareness. These requirements further formalized using temporal logics. The formalized requirements further translated into state automaton automatically.