Last edited by Kakinos
Sunday, August 9, 2020 | History

1 edition of A formal approach to hazard decomposition in Software Fault Tree Analysis found in the catalog.

A formal approach to hazard decomposition in Software Fault Tree Analysis

Donald Michael Needham

A formal approach to hazard decomposition in Software Fault Tree Analysis

by Donald Michael Needham

  • 125 Want to read
  • 26 Currently reading

Published by Naval Postgraduate School in Monterey, California .
Written in English

    Subjects:
  • Digital control systems,
  • Computer science

  • About the Edition

    As digital control systems are used in life-critical applications, assessment of the safety of these control systems becomes increasingly important. One means of formally performing this assessment is through fault tree analysis. Software Fault Tree Analysis (SFTA) starts with a system-level hazard that must be decomposed in a largely-human-intensive manner until specific modules of the software system are indicated. These modules can then be formally analyzed using statement templates. The focus of this thesis is to approach the decomposition of a system-level hazard from a formalized standpoint. Decomposition primarily proceeds along two distinct but interdependent dimensions, specificity of event and subsystem size. The Specificity-of-Event dimension breaks abstract or combined events into the specific system events that must be analyzed by the fault tree. The Subsystem-Size dimension deals with the scope of the hazard, and itemizes the subsystems where localized events may lead to the hazard. Decomposition templates are developed in this thesis to provide a framework for decomposing a system-level hazard to the point at which line-by-line code analysis can be conducted with existing statement templates. These templates serve as guides for conducting the decomposition, and ensure that as many as possible of all the applicable decomposition aspects are evaluated.

    Edition Notes

    StatementDonald Michael Needham
    ContributionsNaval Postgraduate School (U.S.)
    The Physical Object
    Paginationix, 64 p. ;
    Number of Pages64
    ID Numbers
    Open LibraryOL25516016M
    OCLC/WorldCa457270414

      Salehi Fathabadi, Asieh, Butler, Michael and Rezazadeh, Abdolbaghi () A systematic approach to atomicity decomposition in Event-B. [in special issue: Software Engineering and Formal Methods. 10th International Conference, SEFM , Thessaloniki, Greece, October ,   Failure analysis is the process of collecting and analyzing data to determine a cause of a failure and how to prevent it from recurring. It is an important discipline in many branches of manufacturing industry, such as the electronics, where it is a vital tool used in the development of new products and for the improvement of existing ://

      Fault Tree Analysis. Fault trees developed in the aerospace industries, but have found uses in many areas, most recently software analysis. Fault trees operate by developing a list of the faults that can occur in a system, and attempting to trace them back to their root ://~koopman/des_s99/safety_critical.   Hazard analysis. o Concerned with discovering the root causes of risks in a particular system.. o Techniques have been mostly derived from safety-critical systems and can be Inductive, bottom-up techniques. Start with a proposed system failure and assess the hazards that could arise from that failure; Deductive, top-down techniques. Start with a hazard and deduce what the causes of this ~marchese/SE_New/Sum_12/Sum_htm.

      Fault-tree analysis A deductive top-down technique. Put the risk or hazard at the root of the tree and identify the system states that could lead to that hazard. Where appropriate, link these with ‘and’ or ‘or’ conditions. A goal should be to minimise the number of single causes of system failure. 26Chapter 12 Safety Engineering04/11/ Flow-Down or Decomposition. If the initial design capability analysis does not provide high confidence that the critical parameter will reside comfortably and consistently within the specification window, robust against noises ranging from manufacturing variation through variations in use conditions, environments, system interactions and measurement error, then the team will need to engage in ?p=&seqNum=7.


Share this book
You might also like
Waterfowl banding in the Canadian prairie provinces

Waterfowl banding in the Canadian prairie provinces

The Gospel According to Paul Romans Volume 5

The Gospel According to Paul Romans Volume 5

The whole proceedings in the House of Peers, upon the indictments against William Earl of Kilmarnock, George Earl of Cromertie, and Arthur Lord Balmerino; for high treason

The whole proceedings in the House of Peers, upon the indictments against William Earl of Kilmarnock, George Earl of Cromertie, and Arthur Lord Balmerino; for high treason

investigation of criteria affecting the prognosis of the geriatric aphasic in extended care facilities.

investigation of criteria affecting the prognosis of the geriatric aphasic in extended care facilities.

Cleaning and renovating at home

Cleaning and renovating at home

Virginia Facts & Factivities CD-ROM (Carole Marsh Virginia Books)

Virginia Facts & Factivities CD-ROM (Carole Marsh Virginia Books)

Nationwide inventory of air pollutant emissions, 1968.

Nationwide inventory of air pollutant emissions, 1968.

Mountain weather for climbers

Mountain weather for climbers

Voting in cities

Voting in cities

Vital statistics of Lawrence County, Kentucky, 1852-1907

Vital statistics of Lawrence County, Kentucky, 1852-1907

present value of the past

present value of the past

Paul MacE Guide to Utility Software

Paul MacE Guide to Utility Software

Mary of Scotland (1561-1568)

Mary of Scotland (1561-1568)

Introduction to the arts endowment

Introduction to the arts endowment

A formal approach to hazard decomposition in Software Fault Tree Analysis by Donald Michael Needham Download PDF EPUB FB2

A formal approach to hazard decomposition in Software Fault Tree Analysis. One means of formally performing this assessment is through fault tree analysis.

Software Fault Tree Analysis (SFTA) starts with a system-level hazard that must be decomposed in a largely-human-intensive manner until specific modules of the software system are   A FORMAL APPROACH TO HAZARD DECOMPOSITION IN SOFTWARE FAULT TREE ANALYSIS(U) mmmfflu.

13aTYPE, OFREPORT Master s Thesis i&. TIME COVERED FROM TO PAGE COUNT 75 DATE OF REPORT (Year, Month, Day) June SUPPLEMENTARY NOTATION The views expressed in this thesis are those of the author and do not reflect the official Qualitative analysis can identify the priority of reasons and hidden hazard, and can predict the probability of accidents occurrence.

But the FTA is a close combination of mathematics and professional knowledge. The formulation and analysis of the fault tree need a solid mathematical foundation and considerable professional ://   Sect. 3 presents a real world case study from the domain of railroads.

Learned lessons are presented in Sect. A conclusion and an outlook is given in Sect. 2 Formal Fault Tree Analysis A well-known safety analysis technique is fault tree analysis (FTA, [16]). FTA was developed for technical systems to analyze if they permit a hazard (top   Being a top-down approach, in contrast to the fault hazard and FMECA, the FTA may miss some non-obvious top level hazards.

Evaluating a Fault Tree Analysis. FTA is a technique that can be used for any formal system safety program analysis (PHA, SSHA, O&SHA). The FTA is one of several deductive logic model techniques, and is by far the most ://   From Fault Tree Analysis to Formal System Specification and Verification with OTS/CafeOBJ the informal construction process of the fault tree, i.e., the decomposition of the fault event is usually driven by intuition rather than in a formal way.

Given an tion of   However software has a major influence on safety in many modern systems, e.g. aircraft and engine controls, railway signalling, and medical equipment. The paper outlines the principles of system hazard and safety analysis, and briefly describes work on adapting classical hazard and safety analysis techniques to apply to ://   Fault Hazard Fault Tree Common Cause Failure Sneak Circuit Energy Trace Failure Modes, Effects, and Criticality Analysis (FMECA) Fault Hazard Analysis The Fault Hazard Analysis is a deductive method of analysis that can be used exclusively as a qualitative analysis or, if desired, expanded to a quantitative ://   A hazard analysis uses a top -down methodolo gy that first identifies risks and then isolates all possible (or probable) causes.

For an operational system, it is performed for specific suspect hazards. In the case of the hazard analysis, failures, operating procedures, human factors, and transient conditions are   Fault tree analysis (FTA), risk assessment, reliability and safety, hazard analysis, FTA modification.

NTRODUCTION. Fault Tree analysis translates the physical system into a logical diagram due to which it is one of the most favored method used these days by the people involved in reliability and safety calculations in   requirements. Van Lamsweerde believes that goal tree specification using “goal diagrams” is essential, and that it is effective to use formal models in Unified Modeling Language (UML) to represent these goals.

Conversely to the fault tree structures that use OR gate structures for the basic logic of the fault tree, with AND gates to model   Systems Theoretic Process Analysis (STPA) is a powerful new hazard analysis method designed to go beyond traditional safety techniques—such as Fault Tree Analysis (FTA)—that overlook important causes of accidents like flawed requirements, dysfunctional component interactions, and software Preliminary Hazard Analysis (PHA): New hybrid approach to railway risk analysis 1.

International Refereed Journal of Engineering and Science (IRJES) ISSN (Online) X, (Print) Volume 6, Issue 2 (February ), PP. 51 | Page Preliminary Hazard Analysis (PHA): New hybrid approach to railway risk analysis Dr.

Habib Hadj-Mabrouk French Institute Of   A good risk analysis takes place during the project planning phase. These are things we know. What sometimes isn’t clear is exactly how that risk analysis should take place.

Sometimes the hardest part of undertaking a project is getting things started. In this article, I hope to take you through the steps of risk analysis in a salient :// Failure propagation analysis as a fault tree. the clear decomposition proposed in this approach consti- breaking down safety goals from the hazard analysis and risk assessment into /_The_Safety_Requirements_Decomposition_Pattern.

Fault Tree Analysis (FTA) is a method often proposed for calculation of the PMHF in real-world systems. However, FTA is a very general method, subject to a wide range of interpretations and techniques depending on the objectives of a given problem, the type of failures & faults being considered, and the terminology employed by various ://   Layers of Protection Analysis (LOPA) is a simplified form of numerical risk assessment.

It is an order of magnitude approach and hence precise figures are not used. The technique does have significant limitations compared to more advanced techniques such as Fault Tree Analysis, QRA, etc. This paper highlights some of the mistakes that are seen Safety Verification of Ada Programs Using Fault Tree Analysis,” In IEEE Software 8,4, Article.

A Formal Approach to Hazard Decomposition in Software Fault Tree :// "The hardware and software safety program shall be based on a formal safety methodology that includes a Failure Modes, Effects, Criticality Analysis ; verification and validation testing for all hardware and software components and their interfaces; and comprehensive hardware and software integration testing to ensure that the hardware and   Journal of Software Engineering and Applications Vol No(), Article ID,19 pages /jsea Automatic Derivation of Fault Tree Models from SysML Models for Safety Analysis.

m the hazard analysis and risk assessment (HARA) process and assign an Automotive Safety Integrity Level (ASIL) rating for each hazard. te the result of the HARA process with a Simulink model of the crusie control system. fine a safety goal to prevent each hazard or mitigate the effect of it in case the hazardous event  Furthermore, the experiment raised some interesting questions about the methodology of applying fault tree analysis on formal models (Sect.

5), and the formal semantics of fault trees (Sect. 6). Finally, Sect. 7 concludes the paper, and gives an outlook on future  › 百度文库 › 行业资料. SA is based on the construction of complex artifacts such as Fault Trees, which describe how certain faults may cause some top-level events.

SA is intended to mirror the hierarchical design of the system focusing on the safety aspects. In this paper, we propose a formal approach where the nominal specification of a