Automating compositional safety analysis using a failure type taxonomy for component fault trees

Möhrle, Felix; Zeller, Marc; Höfig, Kai; Rothfelder, Martin; Liggesmeyer, Peter

doi:10.1201/9781315374987-207

Cited by 4 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A library, which contains CFT elements for all system components, supports reusability by allowing stakeholders to create different CFTs by changing the assembly of the CFT elements according to the system architecture. Based on the methods described in [14,13], it is possible automate the composition of CFTs. Hence, by automatically generating mappings between the input and output failure modes, system-wide safety analysis models can be automatically created.…”

Section: Methods To Enable Continuous Delivery For Safety-critical Sy...mentioning

confidence: 99%

Towards Continuous Safety Assessment in Context of DevOps

Zeller¹

2021

Preprint

View full text Add to dashboard Cite

Traditionally, promoted by the internet companies, continuous delivery is more and more appealing to industries which develop systems with safety-critical functions. Since safety-critical systems must meet regulatory requirements and require specific safety assessment processes in addition to the normal development steps, enabling continuous delivery of software in safety-critical systems requires the automation of the safety assessment process in the delivery pipeline. In this paper, we outline a continuous delivery pipeline for realizing continuous safety assessment in software-intensive safety-critical systems based on modelbased safety assessment methods.

show abstract

Section: Methods To Enable Continuous Delivery For Safety-critical Sy...mentioning

confidence: 99%

Towards Continuous Safety Assessment in Context of DevOps

Zeller¹

2021

Preprint

View full text Add to dashboard Cite

show abstract

“…Moreover, CMC elements can be composed automatically in the same way as CFT elements can be composed (cf. [19]).…”

Section: Generalized Hybrid Component Fault Treesmentioning

confidence: 99%

Combination of Component Fault Trees and Markov Chains to Analyze Complex, Software-Controlled Systems

Zeller

Montrone

2018

2018 3rd International Conference on System Reliability and Safety (ICSRS)

View full text Add to dashboard Cite

Fault Tree analysis is a widely used failure analysis methodology to assess a system in terms of safety or reliability in many industrial application domains. However, with Fault Tree methodology there is no possibility to express a temporal sequence of events or state-dependent behavior of softwarecontrolled systems. In contrast to this, Markov Chains are a state-based analysis technique based on a stochastic model. But the use of Markov Chains for failure analysis of complex safetycritical systems is limited due to exponential explosion of the size of the model. In this paper, we present a concept to integrate Markov Chains in Component Fault Tree models. Based on a component concept for Markov Chains, which enables the association of Markov Chains to system development elements such as components, complex or software-controlled systems can be analyzed w.r.t. safety or reliability in a modular and compositional way. We illustrate this approach using a case study from the automotive domain.

show abstract

“…Methods that employ the MBSA paradigm can be classified into two major categories, the Compositional Safety Analysis (CSA) and the Behavioural Safety Analysis (BSA) (Sharvia & Papadopoulos, 2011;Möhrle et al, 2016), discussed in the following sections.…”

Section: Model-based Safety Analysismentioning

confidence: 99%

Model-Connected Safety Cases

Retouniotis

Papadopoulos

Sorokos

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Regulatory authorities require justification that safety-critical systems exhibit acceptable levels of safety. Safety cases are traditionally documents which allow the exchange of information between stakeholders and communicate the rationale of how safety is achieved via a clear, convincing and comprehensive argument and its supporting evidence. In the automotive and aviation industries, safety cases have a critical role in the certification process and their maintenance is required throughout a system's lifecycle. Safety-case-based certification is typically handled manually and the increase in scale and complexity of modern systems renders it impractical and error prone.Several contemporary safety standards have adopted a safety-related framework that revolves around a concept of generic safety requirements, known as Safety Integrity Levels (SILs). Following these guidelines, safety can be justified through satisfaction of SILs. Careful examination of these standards suggests that despite the noticeable differences, there are converging aspects. This thesis elicits the common elements found in safety standards and defines a pattern for the development of safety cases for cross-sector application. It also establishes a metamodel that connects parts of the safety case with the target system architecture and model-based safety analysis methods. This enables the semiautomatic construction and maintenance of safety arguments that help mitigate problems related to manual approaches. Specifically, the proposed metamodel incorporates system modelling, failure information, model-based safety analysis and optimisation techniques to allocate requirements in the form of SILs. The system architecture and the allocated requirements along with a user-defined safety argument pattern, which describes the target argument structure, enable the instantiation algorithm to automatically generate the corresponding safety argument. The idea behind model-connected safety cases stemmed from a critical literature review on safety standards and practices related to safety cases. The thesis presents the method, and implemented framework, in detail and showcases the different phases and outcomes via a simple example. It then applies the method on a case study based on the Boeing 787's brake system and evaluates the resulting argument against certain criteria, such as scalability. Finally, contributions compared to traditional approaches are laid out.

show abstract

Automating compositional safety analysis using a failure type taxonomy for component fault trees

Cited by 4 publications

References 0 publications

Towards Continuous Safety Assessment in Context of DevOps

Towards Continuous Safety Assessment in Context of DevOps

Combination of Component Fault Trees and Markov Chains to Analyze Complex, Software-Controlled Systems

Model-Connected Safety Cases

Contact Info

Product

Resources

About