We present a verification methodology for cooperating traffic agents covering analysis of cooperation strategies, realization
of strategies through control, and implementation of control. For each layer, we provide dedicated approaches to formal verification
of safety and stability properties of the design. The range of employed verification techniques invoked to span this verification
space includes application of pre-verified design patterns, automatic synthesis of Lyapunov functions, constraint generation
for parameterized designs, model-checking in rich theories, and abstraction refinement. We illustrate this approach with a
variant of the European Train Control System (ETCS), employing layer specific verification techniques to layer specific views
of an ETCS design.
This work was partly supported by the German Research Council (DFG) as part of the Transregional Collaborative Research Center
“Automatic Verification and Analy- sis of Complex Systems” (SFB/TR 14 AVACS, http://www.avacs.org/).