Synthesis of a Controller Algorithm for Safety-Critical Systems

Abstract

Systems of today are becoming more complex; they have many levels of the control hierarchy, are software-intensive, use different networks, have increasing processing power, use a diversity of devices, and require more integration. Systems-Theoretic Process Analysis (STPA) is a technique that is being used to analyze the safety of those systems at the concept stage. For the design phase, STPA can be combined with SysML modeling activities, including simulation and formal verification of systems models to produce the control software more efficiently. However, for the design phase, when starting from the STPA analysis there is no support to elaborate the control algorithm. Building the control algorithm is one of the most difficult tasks in the design phase. We propose a method to synthesize the control algorithm for safetycritical systems from the STPA analyses and the functional requirements. Our method maps the control structure (STPA) into a block diagram (SysML), and it uses the STPA results to generate an initial state machine diagram (SysML) for automated controllers, actuators, and sensors. We use our method to generate the control algorithms for an Adaptive Cruise Control system. We evaluate the synthesized algorithms by performing model simulation and formal verification. This illustrates that our method is a systematic way to synthesize control algorithms that satisfy both safety and functional requirements.INDEX TERMS Safety, Systems Modeling Language, Model checking, Control system synthesis, System analysis and design.

Thinking in Systems, Sifting Through Simulations: A Way Ahead for Cyber Resilience Assessment

“…While STAMP and its related tools have a purely qualitative nature, other research is aimed at their integration with risk and losses quantification methods, e.g., [36]. A shared solution relies on the usage of model checking techniques to improve or verify system requirements against their actual configuration [37], [38], to guide prioritization of hazardous scenarios highlighted by the STPA analysis [39], or to perform a safety assessment providing a formal and unambiguous representation of the system and its related threats [40]. In [41] instead, authors proposed an integration of the STPA and the Functional Resonance Analysis Method (FRAM) to carry out a safety analysis identifying potential risks and providing mitigation measures.…”

An Ontology-Based Approach to Aid STPA Analysis

“…In general, the STPA analysis is lengthy and complex, however, it is claimed that STPA identifies more loss scenarios and recommendations when compared to other hazard analysis techniques, such as Fault Tree Analysis (FTA) and Failure Modes and Effects Analysis (FMEA) [7]. STPA is structured into four steps.…”