Autonomous software holds the promise of new operation possibilities, easier design and development and lower operating costs. However, as those system close control loops and arbitrate resources on-board with specialized reasoning, the range of possible situations becomes very large and uncontrollable from the outside, making conventional scenario-based testing very inefficient. Analytic verification and validation (V&V) techniques, and model checking in particular, can provide significant help for designing autonomous systems in a more efficient and reliable manner, by providing a better coverage and allowing early error detection. This article discusses the general issue of V&V of autonomy software, with an emphasis towards model-based autonomy, model-checking techniques and concrete experiments at NASA. 1# Introduction NASA's mission of deep space exploration, coupled with Administrator Goldin's directive to do it "faster, better, and cheaper", has created an exciting c...

This Report includes data that shall not be disclosed outside the Government and shall not be duplicated, used, or disclosed in whole or in part for any purpose other than to evaluate this Report. This restriction does not limit the right of the Government to use information contained in this Report if it is proprietary data contained herein, if obtained from another source without restriction. The data subject to this restriction are contained in all sheets of this Report. The proprietary data contained herein, if disclosed to the public, would affect ISR’s competitive position in obtaining business; therefore, it is considered to be exempt from public release under the Freedom of Information Act (5 USC §552, as amended), paragraph (b)(4). IVVNN-LITREV-F002-UNCLASS-111202