The System Theoretic Accident Modelling and Process (STAMP) of medical pilot knock-out events: Pilot incapacitation and homicide-suicide

Schmid, Daniela; Vollrath, Mark; Stanton, Neville A.

doi:10.1016/j.ssci.2018.07.015

Cited by 17 publications

(5 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It was possible to obtain the necessary information to characterize the residual safety risk of the hazards associated with the system. Also, many studies using STAMP/STPA have been performed in the aeronautics operation field (Berquó 2015;Fleming and Leveson 2015;Fleming et al 2013;Scarinci 2017;Schmid et al 2018). In Brazil, Castilho (2015 and Castilho et al (2018) applied the STPA tool (derived from STAMP) in the risk analysis of light aircraft take-off with crosswind.…”

Section: Resultsmentioning

confidence: 99%

Safety Analysis of GNSS Parallel Runway Approach Operation at Guarulhos International Airport

Rodrigues¹,

Fulindi

Oliveira

et al. 2022

J. Aerosp. Technol. Manag.

View full text Add to dashboard Cite

The air traffic environment is a complex system that involves several players. Between the air navigation service provider (ANPS) and the final client, many different organizations act with different purposes but are strongly interfaced. Changes and modifications in terms of technology, predefined process, or personnel are constantly needed, requiring coordination among the stakeholders. However, due to the high level of interaction between the players, any change in a complex system like the air traffic environment requires risk management. This paper demonstrates the suitability and advantages of the System-Theoretic Accident Model and Processes/Systems-Theoretic Process Analysis (STAMP/STPA) method to be applied to the risk assessment of an operational air traffic modification. The method, which had never been used on an air traffic problem in Brazil before, was applied considering the implementation of segregated simultaneous operation at the Guarulhos International Airport. The results were proven to be effective in terms of deriving useful safety requirements. From such demonstration, STAMP/STPA can be considered as a feasible alternative to the brainstorming method currently applied for risk assessment and generation of safety requirements regarding modifications in the structure of the air traffic services (ATS) in Brazil.

show abstract

Section: Resultsmentioning

confidence: 99%

Safety Analysis of GNSS Parallel Runway Approach Operation at Guarulhos International Airport

Rodrigues¹,

Fulindi

Oliveira

et al. 2022

J. Aerosp. Technol. Manag.

View full text Add to dashboard Cite

show abstract

“…Two systemic accident analysis methods (Accimap and STAMP) were selected in this study since they are well established and currently dominant in human factors and system safety literature (Zhoy, et al, 2018;Nayak, et al, 2018;Stevens, et al, 2016;Schmid, et al, 2018;Düzgün, et al, 2018;Valdez Banda, et al, 2018;Canham et al, 2018).…”

Section: Systemic Accident Analysis Methods: Accimap and Stampmentioning

confidence: 99%

Four studies, two methods, one accident – An examination of the reliability and validity of Accimap and STAMP for accident analysis

2019

View full text Add to dashboard Cite

The validity and reliability of human factors and safety science methods are some of the important criteria for judging their appropriateness and utility for accident analysis, however these are rarely assessed. The aim of this study is to take a closer look at the validity and reliability of two systemic accident analysis methods (Accimap and STAMP) by comparing the results of four studies which analysed the same accident (the South Korea Sewol Ferry accident) using two methods. Studies 1 and 2 used Accimap whilst Studies 3 and 4 applied STAMP. The four studies were compared in terms of analysis procedure taken, level of detail, causal factors identified, and the recommendations for improvements suggested by the methods. The results of the causal factor comparison indicate that the reliability (degree of overlap of causal factors identified from the same method, i.e. inter-analyst overlap) of STAMP (65%) is higher than Accimap (38%). The validity (degree of overlap of causal factors identified from two different methods) is as low as 8%. The comparison of recommendations indicates that STAMP-based analyses produce a wider range of recommendations across multiple system levels while Accimap-based analyses tend to focus on whole system-related recommendations. These findings suggest that the use of a more structured method like STAMP can help produce a more reliable accident analysis results.

show abstract

“…In addition, a new STPA method was developed to deal with closed-loop actions on a continuous control system and was effectively used to analyze data collected during a crosswind flight test campaign [18]. The work of Schmid et al [19] extended STPA to pilot behaviors to investigate how these knockout events may be encountered throughout the system and to prevent hazardous pilot behaviors caused by medical incapacitation and homicidalsuicidal behaviors at different levels of the system. Although the STPA method has been widely used for the hazard analysis of large complex systems in aerospace, it is rarely used in IMA systems.…”

Section: Literature Reviewmentioning

confidence: 99%

Safety Assessment of the Reconfigurable Integrated Modular Avionics Based on STPA

Zhao

Dong

Li³

et al. 2021

International Journal of Aerospace Engineering

View full text Add to dashboard Cite

The reconfiguration technology, which is the significant feature of the newly designed Integrated Modular Avionics (IMA) system, enables the transfer of avionics functions from the failed module to the residual normal module, thereby enhancing the robustness of the whole system. The basic target of the IMA reconfiguration is to ensure the safe flight and correct execution of the mission. To solve the problem of lack of effective management mechanism for the IMA system development and safety assessment, a safety analysis method based on STAMP/STPA and UPPAAL for IMA reconfiguration is proposed. The method focuses mainly on system characteristics and multiparty interactions. On the basis of this approach, some studies and analyses have been carried out. Firstly, the STAMP/STPA principle is studied and used to identify unsafe control actions in the reconfiguration process. Secondly, a formal model of IMA reconfiguration is developed using UPPAAL. Finally, the accessibility analysis of the formal model is used to analyze UCAs and the corresponding loss scenarios. The method enables a detailed description of the interactions between the components and a rigorous mathematical analysis of the system, thereby diluting the effect of human factors while ensuring the accuracy and reliability of the safety constraints.

show abstract

The System Theoretic Accident Modelling and Process (STAMP) of medical pilot knock-out events: Pilot incapacitation and homicide-suicide

Cited by 17 publications

References 30 publications

Safety Analysis of GNSS Parallel Runway Approach Operation at Guarulhos International Airport

Safety Analysis of GNSS Parallel Runway Approach Operation at Guarulhos International Airport

Four studies, two methods, one accident – An examination of the reliability and validity of Accimap and STAMP for accident analysis

Safety Assessment of the Reconfigurable Integrated Modular Avionics Based on STPA

Contact Info

Product

Resources

About