A Comparative Study of STPA Hierarchical Structures in Risk Analysis: The Case of a Complex Multi-Robot Mobile System

Bensaci, Chaima; Zennir, Youcef; Pomorski, Denis

doi:10.1109/eecs.2018.00080

Cited by 15 publications

(9 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such scenarios could include all trigger events that lead to damage. In compliance with the ISO/ PAS 21448:2019 (SOTIF) standard [7], one should take into account 4 scenario types presented in Fig. 3: When constructing a safety model for a complex system, the objective is to get the maximum coverage for all scenarios and to bring the number of unsafe control scenarios to an acceptable level.…”

Section: Stpa-based Safety Evaluation Methodologymentioning

confidence: 99%

Safety model construction for a complex automatic transportation system

Ozerov

Ol'Shanskii

2021

Nadežnostʹ

View full text Add to dashboard Cite

The Aim of the paper is to consider approaches to the analysis of a safety model of complex multi-loop transportation systems comprising not completely supervised subsystems. Method. For the description of a safety model, the paper uses systems theoretic process analysis (STPA) methods and the principles specified in ISO/PAS 21448:2019 (SOTIF). Result. The paper shows drawbacks of the FTA and FMEA local risk analysis methods and demonstrates a demand for some universal approach based on the combination of STPA and control theory. It gives an overview of the major stages of such analysis for the safety model of complex transportation systems exemplified by the Moscow Central Circle, which provide a feedback for safety evaluation of a transport control system under development. The paper analyzes the feasibility of using a virtual model for control purposes in the form of a so-called “supervised artificial neural network”.Conclusion. Today, railways are actively testing autonomous systems (with no driver onboard) that apply as their subsystems automatic perception modules using machine learning. The introduction of the latter into the control loop complicates the task of hazard analysis and safety evaluation of such systems using conventional FTA and FMEA methods. The construction of a safety model of such complex multi-loop transportation systems comprising not completely supervised subsystems that use machine learning methods with not completely predictable behavior requires the application of a systems approach to the analysis of unsafe scenarios along with the compilation of a scenario library and the formalization of a hazard model’s description, pertaining to the boundaries of various control loops as well, in order to reduce the regions of unknown unsafe scenarios for autonomous transportation systems under development.

show abstract

Section: Stpa-based Safety Evaluation Methodologymentioning

confidence: 99%

Safety model construction for a complex automatic transportation system

Ozerov

Ol'Shanskii

2021

Nadežnostʹ

View full text Add to dashboard Cite

show abstract

“…In the study by Bensaci, Zennir and Pomorski (2018), STPA was applied to a Complex Multi-Robot Mobile System. Furthermore, STPA has been compared with several methods other than HAZOP in several domains.…”

Section: Approaches To Hazard Identificationmentioning

confidence: 99%

Hazard Analysis of an Autonomous Container Handling System – a Comparison of STPA and HAZOP Methods

Heikkilä¹,

Malm²,

Sarsama³

et al. 2023

SJGMU

View full text Add to dashboard Cite

Increasing automation is a major trend in container terminals. In automated container handling systems, safety has been previously ensured by segregating the automated machinery from other traffic and workers moving on foot. Currently, further increases in flexibility are sought by developing autonomous systems that are capable of mixed-traffic operations without the need for separate operating areas. This increases the complexity of the systems and introduces new safety hazards. In addition to traditional hazard analysis methods, new approaches are needed to address the emergent risks related to autonomous operations. This paper studies the applicability of the STPA (system-theoretic process analysis) method in hazard analysis of an autonomous machine system. To support the evaluation, we define evaluation categories for comparison of the analysis methods. We also compare STPA with an established method, HAZOP (hazard and operability study). To perform the comparison, both STPA and HAZOP are applied to an autonomous container handling system concept. The study suggests that both STPA and HAZOP are well suited to support the development of autonomous machinery. However, we also highlight some notable differences in the methods, mostly related to the different underlying accident models that they utilise. HAZOP is an established method with tools and standards available. STPA, on the other hand, provides a well-defined syntax to ensure the analysis quality and a system modelling approach that supports the system development.

show abstract

“…In the domain of nuclear power plant operation automation, the STPA method can be applied to the operational automation systems of nuclear power plants, analyzing the potential risks that the application of artificial intelligence brings to the safety of nuclear power plant systems, and proposing corresponding safety control measures [11] . In the field of intelligent robotics, STPA can be used to analyze safety issues in intelligent robot systems, including risks related to robot-human interaction, environment perception, decision-making, and execution [12]- [15] . However, the researchers mentioned above hold a more high-level view and focus more on autonomy of AI systems, neglecting the characteristics of machine learning (ML) components, which is also a direct cause of system safety and reliability.…”

Section: Stpa For Ai Systemsmentioning

confidence: 99%