Slotosch, OscarWildmoser, MartinPhilipps, JanJeschull, ReinhardZalman, RafaelPlödereder, ErhardDencker, PeterKlenk, HerbertKeller, Hubert B.Spitzer, Silke2018-10-312018-10-312012978-3-88579-604-6https://dl.gi.de/handle/20.500.12116/17563Software tools in safety related projects are indispensable, but also introduce risks. A tool error may lead to the injection or non-detection of a fault in the product. For this reason the safety norm for road vehicles, ISO 26262, requires determination of a tool confidence level for each software tool. In this paper we present a model-based approach to represent a tool chain, its potential errors and the counter-measures for these. In this model tools are not only error sources, but can also act as error sinks for other tools by providing appropriate checks and restrictions. The tool work flow in a project can be rearranged or extended to make the integrated tool chain safer than its parts and to reduce tool qualification costs greatly. The tool chain model not only identifies the critical tools, but also exposes very specific qualification requirements for these. The paper illustrates and augments this approach with experiences and results from an application to a real industrial automotive tool chain consisting of 37 tools.enText/Conference Paper1617-5468