AUTILE Framework An AUTOSAR Driven Agile Development Methodology To Reduce Automotive Software Defects
AUTILE Framework An AUTOSAR Driven Agile Development Methodology To Reduce Automotive Software Defects
Abstract—This article introduces AUTOSAR Driven Agile De are adopting newer approaches to designing software [1]–[4],
velopment (AUTILE) Framework as a new methodology to de with a focus on standardization to achieve better scalability of
velop automotive software with an aim to reduce the number of the software for different variants of the electronic control
defects and their severity. Automotive software, developed in a units (ECUs) [9]–[20]. Several new frameworks have also
traditional/legacy way, currently must be rewritten from scratch
been intro duced to fundamentally change software
to support new features or modifications in associated hardware.
Disruptive automotive megatrends: connectivity, electrification, development method ology. These frameworks enable the
and autonomous driving continue to demand new features in a developers to integrate modifications, even in late design
complex software-base. As a result, greater quality issues are stages, without compromising the quality and safety features
faced when more functionality is added to traditional, of the product [21]–[33].
nonstandardized automotive software. Several researchers have In recent years, the integration of software into automotive
proposed standard ization of automotive software to improve the in dustry has seen exponential growth [5], [6], [8], [34]. The
software quality. However, as yet, the industry lacks a de facto
current generation of cars is equipped with more software
standard. At the heart of the AUTILE Framework, we
recommend following automotive open system architecture modules than some highly sophisticated machines such as,
standard as the basis to design modular and open software Boeing airplanes and US Air Force fighter jets [5]–[7].With
architecture. To further realize the benefits of modular software increased dependence on software-controlled components,
architecture designed in the first phase, AUTILE chooses and there is a greater risk of equipment malfunction. Many
integrates Agile methodologies as its software devel opment researchers have claimed a linear relationship between the
approach. Widespread adoption of Agile methodologies for number of lines of code and the average number of software
automotive software development has not occurred and this
defects [6], [34]. Having an automobile with millions of lines
research highlights the enablers and barriers in this domain. The
proposed framework was applied practically to develop automo of code implies a significant number of defects. Even with
tive software projects, demonstrating that defect reduction can be strict quality assurance measures, up to 15% of these defects
accomplished using the steps outlined in this new methodology. can go undetected in manufactured units [6], [34]. A steady
rise in automotive recalls has been observed over the years
Index Terms—Automotive open system architecture
[35], [36] and among these recalls, 15% have been due to
(AUTOSAR), agile systems engineering (ASE), automotive
software development, software quality, software defect software defects [35]. As software content increases in
reduction, defect severity index. automobiles, software portability, scalability, and
transferability become vitally important [9], [16], [19].
Utilization of a sta ble software base for more than one
I. INTRODUCTION automotive variant, with little or no modifications, reduces
research and development costs. However, traditional software
T HE automotive industry is rapidly evolving through development practices in the automotive industry experience
poor portability, i.e., the code has to be rewritten from scratch
global from any modifications to the associated hardware [9], [10],
[16], [19]. Scholars and professionals have argued that
trends of electrification, connectivity, and automation
standardization of automotive software can improve the
[1]– [4]. The integration of software in automobiles is
reusability and several attempts have been made in this regard
becoming a key differentiator in providing value-added, as
[9]–[11], [13], [14], [17], [20]. One successful example of
well as safety-critical, features [5]–[8]. A typical automotive
such an attempt is the establishment of the Automotive Open
development cycle ranges from four to eight years during
System Architecture (AUTOSAR), with an aim to provide
which several technologies considered state-of-the-art during
modular and open software architectures [9], [10], [16], [19],
the design phase may become obsolete at the time of
[37].
production for the consumer market. Therefore, in order to
stay competitive, automotive companies The automotive industry has also been characterized by
strin gent demands on quality and documentation for all
software requirements. This makes adoption of development
Manuscript received February 13, 2020; revised May 13, 2020; accepted
May 17, 2020. This work was supported by Siemens Digital Industries models like V or Waterfall the preferred choices [25], [30],
Software Division. (Corresponding author: Ahmed M. Khan.) [38]– [40]. The automotive industry is constantly disrupted by
Ahmed M. Khan is with the Mentor, A Siemens Business, Wilsonville, OR trends like automation, connectivity, and electrification, for
97070 USA (e-mail: [email protected]). which
Timothy D. Blackburn is with the Department of Engineering Management,
2 IEEE SYSTEMS JOURNAL
the Waterfall Model a preferred choice. In the automotive in
dustry, the process begins by gathering associated
requirements are anticipated at the later stages of the de sign requirements from customers (OEMs, Tier-1s). Tier-2s focuses
phase [1]–[4], [41]. For this purpose, adoption of a lightweight on the devel opment process internally afterward and create a
process for software development, reducing delays due to stable software design and architecture. Software
requirement elicitation to validation and production without development, testing, and integration phases are executed
compromising quality, becomes a key requirement. An afterward. During these phases, customers are again involved,
Agile-based software development approach can provide these and the software is deployed only if it meets predefined
benefits [25], [30], [38]–[40], [42]–[46]. Although auto motive acceptance criteria. Waterfall-based software development
manufacturers are starting to follow the Agile frame work, the minimizes risk and uncertainty, especially if the requirements
adoption process is very slow [21], [22], [31], [32], [47], [48]. do not change after the initial definition phase and the relevant
Standardization of automotive software and adoption of skillset is available for the development [30], [38]. Its other
Agile methods may allow automotive manufacturers to advantages include efficient resource and financial planning,
effectively deal with emerging trends in the industry. “scope creep” prevention, accuracy of design, and extensive
Standardization and early adoption can translate the documentation [30], [38], [39].
challenges faced by many automo tive companies into Strict traceability between definition and test phases of the
competitive advantages by improving soft ware quality aspects project can also be achieved by deploying a V-model-based de
like scalability, transferability, reusability, portability, and velopment process [30], [49]. All the requirements are
maintainability over the product life-cycle [9], [10], [16], [17], gathered at the start of the process with an assumption that the
[19]. It may lead to better software integra tion, resulting in required skillset is readily available [25], [38], [39]. From the
improved efficiency [15], [16]. It will also provide a faster requirement set, software architecture is designed with
path to innovation with better designs [15], [16], [19]. individual software components. After the completion of the
Problem Statement: size and complexity of automotive soft design phase, imple mentation is carried out, followed by
ware are increasing and as a result, modern cars could face individual component testing and integration. With the upward
hundreds of thousands of software defects [6], [34]. bent V, there is an increased focus with 1:1 traceability
Research Statement: An AUTOSAR-driven Agile develop between the design and the test phases. Its other advantages
ment methodology will reduce automotive software defects. include efficient resource and financial planning, “scope creep”
Taking this era of automotive disruption into account, two prevention, accuracy of design, extensive documentation, and
traits have been considered in this research to minimize au detailed evaluation before delivery [30], [38], [39].
tomotive software defects and their severity: 1) a standard ized Traditional automotive software development methods use a
AUTOSAR-based architecture providing better scalability, highly structured and organized approach [39]. The choice of
maintainability, and transferability [9], [10], [15], [16], [19], software development methodology depends on the characteris
and 2) an Agile development approach which is currently not tics of the project, the team, and the organization [29].
being widely used in the automotive software industry [21], However, there is an underlying assumption which is not
[22], [31], [32], [47], [48]. necessarily true in this era of disruption, i.e., “the software
The scope of this research is limited to automotive software requirements will not change after initial elicitation” [25].
projects (ASPs) executed by Tier-2 software suppliers. This Deployment of software into complex, interdependent, and
research does not consider ASPs executed by other automotive connected systems will require modifications at advanced
companies or projects in other industries. stages. Thus, modern automotive-grade software development
needs to cater to con tinuously changing requirements. As a
II. LITERATURE REVIEW result, traditional devel opment approaches do not produce
optimal results [44], [45], face a greater number of defects
A. Automotive Industry and the Ongoing Disruption [25], and may result in conflicts between customers and
McKinsey & Company determined that the conjunction of suppliers at the time of delivery.
automotive trends is disrupting the auto industry [3]. The
report suggests that diffusion of advanced technology will lead C. Agile Methods and Their Suitability for
to more autonomous and electrified vehicles in the coming Automotive Industry
years. Another study identifies that over 1700 start-ups with a
focus on mega-trends of connectivity, autonomous operation, Agile Manifesto has led to the creation of various Agile
and electrification are entering the marketplace and thus techniques including Scrum: [50], [51], eXtreme Program
changing the rules of doing business [41]. This disruption will ming [50], Lean Development [52], Kanban [52], and Feature
affect all aspects of the supply-chain and to remain relevant in Driven Development [50], [52]. Although Agile has a strong
the future, all stakeholders will have to innovate [1]. emphasis on flexibility, the process is not always easy to fol
low [53]. To ease the adaption effort, researchers have pro
posed tailoring Agile methods to organizational requirements,
B. Traditional Automotive Software Development and
environment, and culture [26]–[28], [54], [55]. Automotive
Their Disadvantages
soft ware industry is characterized by stringent demands on
Automotive software development is characterized by quality with all the requirements defined up front, resulting in
upfront definition of requirements and strict quality assurance, minimal use of Agile development. A survey conducted over
making 15–20 leading automotive companies reports that the scope of
Agile
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
KHAN AND BLACKBURN: AUTILE FRAMEWORK: AN AUTILE METHODOLOGY TO REDUCE AUTOMOTIVE SOFTWARE DEFECTS 3
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
KHAN AND BLACKBURN: AUTILE FRAMEWORK: AN AUTILE METHODOLOGY TO REDUCE AUTOMOTIVE SOFTWARE DEFECTS 5
of the product is prepared. If the contract allows shipment of
the source code, .ARXML, .c and .h files are supplied to the
application programming interface level are defined with a customer. In other cases, formats like .elf or .s19 are provided.
goal to achieve a structured and modular software architecture.
Since AUTOSAR is an evolving standard, extensions, and
deviations to its specifications are expected. This aspect is B. Research Hypotheses
considered up front during the design phase. Similarly, RH1: ASPs developed with some application of AUTOSAR
vendor-specific ECU configuration parameters are planned tend to have fewer defects.
with AUTOSAR-based configuration parameters to attain the RH2: ASPs developed with some application of AUTOSAR
required functionality. For consistency and quality purposes, tend to have a lower DSI.
these ECU configuration parameters are extracted from the RH3: ASPs developed with some application of Agile develop
initially supplied ECU extract and taken into account in the ment tend to have fewer defects.
AUTOSAR-specific .ARXML format. AUTOSAR provides a RH4: ASPs developed with some application of Agile develop
modular and open software archi tecture and thus Tier-2s are ment tend to have a lower DSI.
afforded extensions and deviations to that. Dependencies RH5: ASPs developed with an AUTILE-based approach tend
between BSW modules are considered dur ing the design to have fewer defects.
phase to ensure that the developed software meets specified RH6: ASPs developed with an AUTILE-based approach tend
requirements. BSW module dependencies are docu mented in to have a lower DSI.
the AUTOSAR-specific .ARXML format. Moreover, an SWC
Service Layer is generated so application-level service needs C. Variables
can also be identified during the software development
process. Predictor/independent (Y) variables include: application of
Tasks and Low-Level Software Requirements: Low-level AUTOSAR to ASPs and application of Agile to ASPs. Simi
soft ware requirements and individual tasks are created after larly, response/dependent (X) variables are: the total number
the software has been designed. BSW module definitions in of defects, number of average defects per project, and DSI.
the AUTOSAR-specific .ARXML format are extracted from Defect Severity Index (DSI): The automotive software indus
the initially supplied ECU extract. At this point, the try classifies defects into several categories [21], [22], [47],
development team has a clear understanding of the [60] for prioritization and scheduling purposes. While the
requirements and individ ual tasks, such as creation of static nomencla ture could be used interchangeably (e.g., terms like
source code (in .c format) or generator code (in .jar format) “critical” or “blocker” are used for the highest priority defects
that can be scheduled. ECU configurations are also generated and “minor” or ‘’low” for the lowest priority ones), the
as well as application software components. Unit tests underlying classification philosophy remains consistent. Thus,
accompany the developed software-base to satisfy demanding we decided to adopt the terms used by the Tier-2
requirements of quality assurance. More over, to achieve manufacturers, which deployed the AUTILE framework and
compliance with automotive safety standards, attention is paid supplied data for this research. Accord ing to their Quality
to requirement traceability as well. It ensures that a System, defects are classified as follows: Critical: if the
requirement from high level, broken into lower levels, is not artifact is on the customer’s critical path, the defect makes it
only implemented but also fully tested. In the end, artifacts unusable and there is no acceptable workaround. Significant: if
and documentation are created to prepare for release. the artifact will get on customer’s critical path in a short
Daily Scrum: During Sprint execution, a daily stand-up timeframe, the defect makes it unusable and there is no
Scrum is planned with a focus on three questions: 1) What did acceptable workaround. Medium: if the defect impairs use of
we do yesterday?. 2) What is the plan for today?. 3) What the artifact (not necessarily making it unusable), there is no
dependen cies, risks, and roadblocks do we see that may acceptable workaround. Minor: if a workaround exists but the
obstruct the plan? This way, the development plans are tracked defect causes an inconvenience. The DSI is used as a metric to
on a daily basis. Moreover, it is ensured that commitments are determine the level of severity of defects. DSI is a weighted
met and potential hindrances are tackled. average, ranged 1 to 4, which articulates the severity of defects
Sprint Review, Retrospective, and Shippable Increments: At reported for a specific project. With Tier-2 manufacturer we
the end of the Sprint cycle, Sprint Reviews and Retrospectives worked with, it was rounded to nine decimal places and
are planned. The intent of these activities is to learn from past defined as
mistakes so planning can be improved in future projects. DSI = (Number of Critical Defects ∗ 4 + Number of Signif
Missing items, if any, are added back into the Product Back icant Defects ∗ 3 + Number of Medium Defects ∗ 2 + Number
log for reprioritization and scheduling. A shippable increment of Minor Defects ∗ 1) / Total Number of Defects. (1)
assigned to each ASP. These ASPs were developed to deliver
IV. RESULTS different types of automo tive software products and services
to leading Tier-1s (hardware integrators) and car
The source of the dataset is a large, highly mature, and
manufacturers in the automotive industry. These products and
leading Tier-2 (software supplier) in the automotive industry.
services include automotive-grade commu nication, operating
Project status reports were acquired from ASPs delivered by
system, microcontroller drivers, and security components. The
the Tier-2. During the development phase, the duration of the
acquired project reports contained fields like
ASPs was kept from six months to one year so they fit into
release cycle of the company. Two to six developers were
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
KHAN AND BLACKBURN: AUTILE FRAMEWORK: AN AUTILE METHODOLOGY TO REDUCE AUTOMOTIVE SOFTWARE DEFECTS 7
industry. The AUTILE framework provides insights on how to
realize the benefits of software standardization and use Agile
H. Average Defects Per Project: Reduction Realized methodologies for software development in an automotive
Average defects per project were analyzed with a 2-sample company. It can also be used by companies outside the
Poisson rate test. The Poisson rate was observed as 307.818, automotive industry by applying the learning from this
195.414, 169.938, and 128.9 for traditional/legacy, research to their processes in order to improve the software
AUTOSAR, Agile, and AUTILE projects, respectively. It was quality.
observed that the Poisson rate was higher when the framework The findings highlighted by this research open avenues for
was not applied to the ASPs. To gauge statistical significance, other researchers to extend the AUTILE framework for auto
DS 1-3 were tested with a 2-sample Poisson rate test. motive companies by addressing any deficiencies. The
Statistically significant improvement was observed across all research focuses on improving software quality in the
datasets with a P-value of 0.000. The tests confirmed that the automotive in dustry. The research can be extended to other
average number of defects in ASPs with AUTOSAR, Agile, industries, like aerospace, which have stringent quality
and AUTILE is statistically lower than the average number of requirements, or the ones like medical device manufacturing,
defects in ASPs developed in a traditional/legacy method where great attention is paid to processes. Application to the
(without AUTOSAR, Agile, or AUTILE). The results are retail industry, which is
summarized in Table I. currently being disrupted by technology, could also be
explored. Moreover, the research could be replicated among
different product types and technologies or among different
V. CONCLUSIONS, CONTRIBUTIONS, AND
groups and countries to investigate efficiency of the framework
RECOMMENDATIONS for various types of software or within different cultures and
This research is culminated with the following conclusions: geographical settings.
1) ASPs developed with some application of AUTOSAR
face fewer numbers of defects as compared to those without
REFERENCES
it. 2) ASPs developed with some application of AUTOSAR
experience a lower DSI as compared to those without it. 3) [1] “Five trends transforming the automotive industry,” 2017. [Online]. Avail
ASPs developed with some application of Agile face fewer able: https://www.pwc.com/gx/en/industries/automotive/assets/pwc
five-trends-transforming-the-automotive-industry.pdf. Accessed: Jun. 18,
defects as compared to those without it. 2019.
4) ASPs developed with some application of Agile experi [2] P. Pavlinek, “The impact of the 2008–2009 Crisis on the automotive
ence a lower DSI as compared to those without it. 5) ASPs industry: Global trends and firm-level effects in central Europe,” in
developed with AUTILE framework experience fewer Proc. Eur. Urban Regional Studies, 2015, pp. 20–40.
[3] Automotive Revolution & Perspective Towards 2030. Gurugram, India:
defects as compared to those without it. McKinsey & Company. 2016. [Online]. Available: https://
6) ASPs developed with AUTILE framework experience a www.mckinsey.com/industries/automotive-and-assembly/our-insights/
lower DSI as compared to those without it. disruptive-trends-that-will-transform-the-auto-industry. Accessed: Jun.
This research contributes to the body of theoretical knowl 17, 2019.
[4] P. Gao, H. Kaas, D. Mohr, and D. Wee, Disruptive Trends That Will
edge by studying the complexity of deploying standardization
Transform the Auto Industry. Gurugram, India: McKinsey & Company,
and Agile Systems Engineering (ASE) into the automotive Jan. 2016.
software industry and by proposing an automotive software [5] O. Burkacky, J. Deichmann, G. Doll, and C. Knochenhauer, Rethinking
development framework. In a broader perspective, the research Car Software and Electronics Architecture. Gurugram, India: McKinsey
also contributes to the understanding of the complexities of & Company, Feb. 2018.
[6] Z. Fox, How Do We Trust the Software in a Driverless Car? NJ, USA:
standardization and ASE for commercial product development Forbes, Jun. 5, 2018.
environments into environments with established processes. [7] R. N. Charette, “This car runs on code,” IEEE Spectrum, Feb. 2009. [On
The research contributes in the practical application with line]. Available: https://spectrum.ieee.org/transportation/systems/this
deployment of the AUTILE framework to develop ASPs at a car-runs-on-code
[8] A. Haghighatkhah, M. Oivo, A. Banijamali, and P. Kuvaja, “Improving
leading Tier 2 automotive software supplier. This the state of automotive software engineering,” IEEE Softw., vol. 34, no.
implementation activity provides an outline of the procedures 5, pp. 82–86, 2017.
with their respective effects and advantages in the automotive [9] C. Briciu, I. Filip, and F. Heininger, “A new trend in automotive
software: AUTOSAR concept,” in Proc. IEEE 8th Int. Symp. Appl. [17] D. Kant, M. Buhlmann, and M. Kalhammer, “Being innovative by fol
Comput. Int. Inform., 2013, pp. 251–256. lowing standards—Evolving standards in the automotive industry for the
[10] B. Boss, “Architectural aspects of software sharing and standardization: development of safety related vehicle software,” in Proc. SAE World
AUTOSAR for automotive domain,” in Proc. IEEE 2nd Int. Workshop Congr., 2006, pp. 127–136.
Softw. Eng. Embedded Syst., Jun. 9, 2012, pp. 9–15. [18] S. Brewerton, R. Schneider, and F. Grosshauser, “Practical use of AU
[11] “GENIVI Alliance.” Accessed on: Jan. 12, 2019. TOSAR in safety critical automotive systems,” SAE Int. J. Passenger
[12] K. Sung and T. Han, “Development process for AUTOSAR-based embed Cars - Electron. Elect. Syst., vol. 2, no. 1, pp. 249–57, 2009.
ded system,” Int. J. Control Autom., vol. 6, no. 4, pp. 29–38, 2013. [13] G. [19] M. Jensen and T. Mascolo, “AUTOSAR as a key enabler for
Lami, F. Fabbrini, and M. Fusani, “Is automotive SPICE suitable to assess collaborative product development,” SAE Int. J. Passenger
product lines-based software process?” in Proc. IEEE 2nd Eastern Eur. Cars—Electron. Elect. Syst., vol. 3, no. 2, pp. 193–202, 2010.
Regional Conf. Eng. Comput. Based Syst., Sep. 2011, pp. 157–158. [14] T. [20] D. Ahrens, A. Frey, A. Pfeiffer, and T. Bertram, “Designing reusable and
Schumann, “Standardization in the automotive industry,” Electron. World, vol. scalable software architectures for automotive embedded systems in
118, pp. 20–22, Nov. 2012. driver assistance,” in Proc. SAE Int. World Congr. Exhib., Apr. 2010.
[15] S. Mirheidari, A. Fallahi, D. Zhang, and K. Kuppam, “AUTOSAR model [Online]. Available: https://www.sae.org/publications/technical-papers/
based software component integration of supplier software,” SAE Int. J. content/2010-01-0942/
Commercial Vehicles, vol. 8, no. 2, pp. 544–548, 2015. [21] D. West and N. Thurlow, “Automotive agility—Coming back to its roots:
[16] D. Reinhardt, D. Kaule, and M. Kucera, “Achieving a scalable E/E The story of agility, Scrum and Toyota,” in Proc. IQPC, Automotive iQ
architecture using AUTOSAR and virtualization,” SAE Int. J. Passenger Agile Automotive Conf., May 2019. [Online]. Available: https://www.
Cars Electron. Elect. Syst., vol. 6, no. 2, pp. 489–497, 2013. automotive-iq.com/events-agileforautomotive/
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore. Restrictions apply.
This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.
Authorized licensed use limited to: University of Vermont Libraries. Downloaded on July 26,2020 at 21:12:45 UTC from IEEE Xplore.
Restrictions apply.