This paper shows, how MATLAB, Simulink, and Stateflow are used for the development of high-integrity aircraft controller software at the Institute of Flight System Dynamics at TU M¨unchen. It introduces the implemented, so-called ”Modeling Environment” that configures the tools and supports developers in creating DO-331 compliant Design Models and Source Code [20]. The components of the Modeling Environment are explained in detail in the light of the software, hardware, and process context of the controller application. Therefor, the paper distinguishes between two roles of a Design Model. It serves as replacement for Software Low-Level Requirements and Software Architecture on the one hand, and forms the basis for automatic code generation on the other hand. A consistent Modeling Environment unites requirements imposed by both roles. To support this goal, the objective of the paper is to summarize the required content and share gathered experience.     «

This paper shows, how MATLAB, Simulink, and Stateflow are used for the development of high-integrity aircraft controller software at the Institute of Flight System Dynamics at TU M¨unchen. It introduces the implemented, so-called ”Modeling Environment” that configures the tools and supports developers in creating DO-331 compliant Design Models and Source Code [20]. The components of the Modeling Environment are explained in detail in the light of the software, hardware, and process context of th...     »