Model-based development of embedded systems


AutoFOCUS3 is a model-based tool and research platform for safety-critical embedded systems. It builds on a generic Eclipse-based tooling framework, is open source (Apache 2.0 license), and is released biannually for the Windows, Linux, and macOS 64-bit platforms.

AutoFOCUS3 supports the design, development and validation of safety-critical embedded systems in many development phases, including architecture design, implementation, hardware/software integration, and safety argumentation based on formal models from the following viewpoints:

  • Requirements
  • Logical architecture and behaviour
  • Technical (hardware and software) architecture
  • Deployment (software/hardware mapping, scheduling
  • Safety argumentation

Advanced features enable to explore design and implementation alternatives (e.g., safety patterns, task allocation, partition/compartment architectures) based on state-of-the art formal methods and solvers (e.g., Z3 solver), and to validate early designs by means of functional simulation and co-simulation (via FMI). The automatic artefact synthesis capabilities of the tool enable rapid development (e.g., code and configuration generation, scheduling synthesis). Modular assurance cases encoded in the goal-structuring notation (GSN) enable users to document the dependability of a system by bringing in information about its environment and the development context. They provide a structured argument that establishes a systematic relationship between a dependability goal and its evidence (e.g., validation artefact).

Software Downloads

System requirements: Windows, Linux, or macOS with Java Runtime Environment (JRE) 11 (64 bit). Current macOS versions require manual steps during installation (see FAQ).

Current release 2.18 (2020-10-30)


Release Notes

WIN 64Linux 64Mac 64


Nightly Build

WIN 64Linux 64Mac 64



  • Delivering a model-based tool and research platform for the design, development and validation of safety-critical embedded systems
  • Providing a high quality and extensible open source framework for rapid tool prototyping (see, e.g., SmartF-IT)
  • Serving as incubator for advanced systems engineering methods
  • Closing the gap between academia and industry by mutual transfer of novel approaches and practical use cases and requirements

Research contribution

The tool is a research platform to investigate novel model-based systems and software engineering techniques in the following fields:

  • How to build tools that combine the expertise of engineers with the power of state-of-the art formal methods?
  • Definition of correct-by-construction computer aided design approaches to optimize hardware/software architectures that satisfy industrial constraints (e.g., safety, reliability, real-time, etc.).
  • How to enable the use of the most efficient solver or a combination of solvers (e.g., SMT, MOEA) for model-based design-space exploration techniques that scale in realistic use cases?
  • How to enable the efficient construction and maintenance of large dependability arguments for systems in open contexts with the help of modular assurance cases?
  • How to use model-based engineering to support safety/security trade-off analyses by synthesizing and analysing attack-defence trees for a given safety argumentation?

Application in demonstrators


In the fortissimo-demonstrator, we show how to develop software and system architectures for autonomous vehicles using a model-based approach.

 Johannes Eder

Your contact

Johannes Eder

+49 89 3603522 558

More informationen


[Translate to English:] Technische Universität München