HyperSSE: Cross-Domain Static Analysis of Partitioned Real-Time Hypervisor Systems

ECRTS Conference B Best Student Paper Award
HyperSSE: Cross-Domain Static Analysis of Partitioned Real-Time Hypervisor Systems

Andreas Kässens, Mareike Burg, Daniel LohmannProceedings of the 38th Euromicro Conference on Real-Time Systems (ECRTS '26)2026Best Student Paper Award.
PDF Details Slides 10.4230/LIPIcs.ECRTS.2026.23 [BibTex]

BibTex Entry

@inproceedings{kaessens:26:ecrts,
author = {Andreas Kässens and Mareike Burg and Daniel Lohmann},
booktitle = {Proceedings of the 38th Euromicro Conference on Real-Time Systems (ECRTS '26)},
date = {2026-07-02},
doi = {10.4230/LIPIcs.ECRTS.2026.23},
entrysubtype = {Conference},
series = {ECRTS '26},
title = {{HyperSSE:} Cross-Domain Static Analysis of Partitioned Real-Time Hypervisor Systems},
year = {2026},
}

Abstract

Timing analysis for embedded real-time systems is crucial to guarantee the correct behavior and to calculate the Worst-Case Response Time (WCRT) of safety-critical applications. With the increasing requirements of such systems in automotive, industrial or avionic industries, consolidation of multiple real-time and general-purpose operating systems on a single high-performance Multiprocessor System-on-Chip (MPSoC) platform using Static Partitioning Hypervisors (SPHs) is becoming more prevalent. Although the strong separation is well suited to reduce interference between isolated domains in such mixed-criticality systems, cross-domain interactions must still be considered in real-time analysis. Previous work has focused on dynamic monitoring and enforcement of timing constraints in virtualized environments. In this paper, we present HyperSSE, the first approach for the static analysis of cross-domain interactions in hypervisor-based real-time systems. By hierarchically combining existing domain-local static analyses, and synchronizing the control flow at cross-domain interactions, we enable control-flow-sensitive whole-platform analysis including multiple real-time domains. Using abstract task models, this approach can integrate a coarser analysis of general-purpose operating systems, accelerators, and coprocessors with the precise timing analysis. We demonstrate the applicability of HyperSSE in an automotive case study with mixed-criticality software stacks running on Xen in a static partitioning configuration. The resulting Hypervisor State Transition Graph (HSTG) exposes deep knowledge about the platform interactions, enabling cross-domain timing analysis with reduction of pessimistic WCRT calculations. Additionally, HyperSSE can be used for placement optimizations for better predictability, verification of critical interaction paths, and is the foundation for further platform-level analyses, such as analysis of implicit interactions through transparent resource sharing.

Source Code

The source code of HyperSSE, integrated into the ARA framework, its related subprojects, and test cases are available on GitHub: Parrot (Metarepo).

Artifact

ECRTS Artifact B
HyperSSE: Cross-Domain Static Analysis of Partitioned Real-Time Hypervisor Systems (Artifact)

Andreas Kässens, Mareike Burg, Daniel LohmannDagstuhl Artifacts Series12.2Schloss Dagstuhl – Leibniz-Zentrum für Informatik2026.
Raw Data 10.4230/DARTS.12.2.2 [BibTex]

BibTex Entry

@inproceedings{kaessens:26:darts,
location = {Dagstuhl, Germany},
author = {Andreas Kässens and Mareike Burg and Daniel Lohmann},
date = {2026-07-02},
doi = {10.4230/DARTS.12.2.2},
entrysubtype = {Artifact},
journaltitle = {Dagstuhl Artifacts Series},
number = {2},
publisher = {Schloss Dagstuhl – Leibniz-Zentrum f{ü}r Informatik},
title = {{HyperSSE:} Cross-Domain Static Analysis of Partitioned Real-Time Hypervisor Systems (Artifact)},
volume = {12},
year = {2026},
}