Fast Dynamic Fault Tree Analysis by Model Checking Techniques

Volk, Matthias; Junges, Sebastian; Katoen, Joost-Pieter

doi:10.1109/tii.2017.2710316

Cited by 97 publications

(101 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The state-space generation is computationally the most expensive step as it explores the complete state space defined by the successive failures of BEs. To improve the performance, several optimisations are used [7]. For example, Storm exploits symmetric structures occurring in the FT modelling the sensors.…”

Section: State Space Generationmentioning

confidence: 99%

“…The main bottleneck of the DFT analysis is the state-space explosion problem. For MTTF computations, the problem can be alleviated by building only the most relevant fraction of the state space and derive approximative results [7]. The idea is visualised in Fig.…”

Section: Approximationmentioning

confidence: 99%

“…We extend the approximation algorithm of [7] to also compute the reliability. To over-approximate the probability of a system failure we assume that each terminal state in the partial state space corresponds to the failure of the TLE.…”

Section: Approximationmentioning

confidence: 99%

See 2 more Smart Citations

Safety analysis for vehicle guidance systems with dynamic fault trees

Ghadhab

Junges

Katoen

et al. 2019

Reliability Engineering & System Safety

Self Cite

View full text Add to dashboard Cite

This paper considers the design-phase safety analysis of vehicle guidance systems. The proposed approach constructs dynamic fault trees (DFTs) to model a variety of safety concepts and E/E architectures for drive automation. The fault trees can be used to evaluate various quantitative measures by means of model checking. The approach is accompanied by a large-scale evaluation: The resulting DFTs with up to 300 elements constitute larger-than-before DFTs, yet the concepts and architectures can be evaluated in a matter of minutes. Figure 1: Overview of the model-based safety approachfunctions with a sufficiently low probability of undetected dangerous hardware failures. This paper considers the design-phase safety analysis of the vehicle guidance system, a key functional block of a vehicle with a high safety integrity level (ASIL D, i.e., allowing not more than 10 −8 residual hardware failures per hour). The key point of our approach is to: (1) manually construct dynamic fault trees [2] (DFTs) from industrial system descriptions and combine them (in an automated manner) with hardware failure models for several partitionings of functions on hardware, and (2) analyse the resulting overall DFTs by means of probabilistic model checking [3,4,5].A model-based approach. Fig. 1 summarises the approach, in relation to the structure of this paper. The failure behaviour of the functional architecture, given as a functional block diagram (FBD), is expressed as a two-level DFT: the upper level models a system failure in terms of block failures B i while the lower level models the causes of block failures B i . The use of fault trees is natural: They are a well-known model in reliability engineering. No familiarity with additional formalisms is required. Fault trees for hardware components are typically provided by manufacturers. Failures in function blocks can easily be described by fault trees. The use of DFTs rather than static fault trees allows to model warm and cold redundancies, spare components, and state-dependent faults; cf. [6]. Each functional block is assigned to a hardware platform for which (by assumption) a provided DFT H i models its failure behaviour. Depending on the partitioning, the communication goes via different fallible buses that are also modelled by DFTs Bus i . From the partitioning, and the DFTs of the hardware and the functional level, an overall DFT is constructed (in an automated manner) consisting of three layers: (1) the system layer; (2) the block layer; and (3) the hardware layer. Details are discussed in Sect. 4.Analysis. We exploit probabilistic model checking (PMC) [3,4,5] to analyse the DFT of the overall vehicle guidance system. PMC can be used as a black-box algorithm-no expertise in PMC is needed to understand its outcomes-and supports various metrics that go beyond reliability and MTTF [7]. While they are all expressible by a combination of PMC queries, the number of queries is prohibitively large for some measures relevant for the safety analysis of highly automated cars. Therefore, w...

show abstract

Section: State Space Generationmentioning

confidence: 99%

Section: Approximationmentioning

confidence: 99%

See 1 more Smart Citation

Safety analysis for vehicle guidance systems with dynamic fault trees

Ghadhab

Junges

Katoen

et al. 2019

Reliability Engineering & System Safety

Self Cite

View full text Add to dashboard Cite

show abstract

“…Work has already been done on such techniques for non-repairable dynamic fault trees [VJK18], and we foresee that these techniques can also be applied to fault maintenance trees.…”

Section: Discussion and Future Workmentioning

confidence: 99%

“…Various reduction techniques (e.g., for fault trees specifically, [VJK18]) can help by reducing the number of locations, but still run out of memory for larger systems. The analysis of FMTs avoids this problem by using statistical model checking [BDL + 12], which requires very little memory, at the cost of providing only confidence intervals rather than exact results.…”

Section: Analysis By Statistical Model Checkingmentioning

confidence: 99%

Zen and the Art of Railway Maintenance

Ruijters¹

View full text Add to dashboard Cite

An integrated modelling framework for complex systems safety analysis

Tolo

Andrews

2022

Quality & Reliability Eng

View full text Add to dashboard Cite

The ever-increasing complexity of engineering systems has fuelled the need for novel and efficient computational tools able to enhance the accuracy of current modelling strategies for industrial systems. Indeed, traditional Fault and Event Tree techniques still monopolize the reliability analysis of complex systems despite their limitations, such as the inability to capture underlying dependencies between components or to include degradation processes and complex maintenance strategies into the analysis. However, the lack of alternative solutions able to tackle large-scale modelling efficiently has contributed to the continued use of such methodologies, together with their robustness and familiarity well rooted in engineering practice. The current paper defines a novel modelling framework for safety system performance which retains the capabilities of both fault and event tree methods, but also overcomes their limitations. The ambition is to provide a technique for application to realworld systems preserving a familiar user-model interface and grounding the novel approach in well-known and established reliability techniques. In order to describe the methodology developed and demonstrate its validity, five casestudies referring to a simplified industrial plant cooling system are analysed and discussed. Further discussion regarding the scalability of the proposed approach is provided, outlining the advantages of the current implementation and its computational cost.

show abstract

Fast Dynamic Fault Tree Analysis by Model Checking Techniques

Cited by 97 publications

References 30 publications

Safety analysis for vehicle guidance systems with dynamic fault trees

Safety analysis for vehicle guidance systems with dynamic fault trees

Zen and the Art of Railway Maintenance

An integrated modelling framework for complex systems safety analysis

Contact Info

Product

Resources

About