Application of the D3H2 Methodology for the Cost-Effective Design of Dependable Systems

Aizpurua, Jose Ignacio; Muxika, Eñaut; Papadopoulos, Yiannis; Chiacchio, Francesco; Manno, Gabriele

doi:10.3390/safety2020009

Cited by 11 publications

(12 citation statements)

References 37 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The design of reconfigurable systems is an ongoing research challenge. While many works have concentrated on analysing the influence of homogeneous redundancies, approaches focusing on the evaluation of heterogeneous redundancies are scarce . Heterogeneous redundancies can take many forms: design diversity, analytical redundancies or redundancies arising from overlapped system functions …”

Section: Related Workmentioning

confidence: 99%

“…In highly networked scenarios, there is room to take advantage of over‐dimensioning design decisions and overlapping functions by exploiting heterogeneous redundancies, that is, components that, besides performing their primary intended design function, can also be used as a means of restoring the functionalities lost when other components fail . For systems with high dependability requirements, the effects of such use on dependability must be established.…”

Section: Introductionmentioning

confidence: 99%

“…health management mechanisms) that deploy these redundancies. Heterogeneous redundancies typically operate as cold‐standby redundancies that need to be activated in the presence of failures . Failing to activate a redundancy has consequences for dependability that must be established.…”

Section: Introductionmentioning

confidence: 99%

“…In previous work, we have developed D3H2 for a class of non‐repairable systems . However, most complex industrial systems can be considered repairable .…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

On Cost‐effective Reuse of Components in the Design of Complex Reconfigurable Systems

Aizpurua

Papadopoulos

Muxika

et al. 2017

Quality & Reliability Eng

Self Cite

View full text Add to dashboard Cite

Design strategies that benefit from the reuse of system components can reduce costs while maintaining or increasing dependability-we use the term dependability to tie together reliability and availability. D3H2 (aDaptive Dependable Design for systems with Homogeneous and Heterogeneous redundancies) is a methodology that supports the design of complex systems with a focus on reconfiguration and component reuse. D3H2 systematizes the identification of heterogeneous redundancies and optimizes the design of fault detection and reconfiguration mechanisms, by enabling the analysis of design alternatives with respect to dependability and cost. In this paper, we extend D3H2 for application to repairable systems. The method is extended with analysis capabilities allowing dependability assessment of complex reconfigurable systems. Analysed scenarios include time-dependencies between failure events and the corresponding reconfiguration actions. We demonstrate how D3H2 can support decisions about fault detection and reconfiguration that seek to improve dependability while reducing costs via application to a realistic railway case study.A high-level function consists of a set of Main Functions (MF), for example, train operating properly = {traction system OK, signalling system OK, braking system OK, air conditioning control OK, . . . }. Main functions are performed in possibly different Physical Locations (PLs), for example, a single air conditioning control implementation may span a whole train car, or each car compartment in a train car may have its own air conditioning control. A main function consists of a set of subfunctions (SF), for example, input, control and output subfunctions. A subfunction may have multiple implementations (#) to carry out the subfunction, and these are ordered with respect to their priority.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

“…In previous work, we have developed D3H2 for a class of non‐repairable systems . However, most complex industrial systems can be considered repairable .…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

On Cost‐effective Reuse of Components in the Design of Complex Reconfigurable Systems

Aizpurua

Papadopoulos

Muxika

et al. 2017

Quality & Reliability Eng

Self Cite

View full text Add to dashboard Cite

show abstract

“…There are dependability models that analyse these attributes from a combinatorial failure logic perspective such as Fault Trees, Reliability Block Diagrams, or Event Tree Analysis [47]. However, the failure of some systems (such as reconfigurable and fault-tolerant systems) is caused by time-ordered event sequences and conditional triggering events which combinatorial logic is not powerful enough to model [26], [48].…”

Section: Relevant Workmentioning

confidence: 99%

Improved Dynamic Dependability Assessment Through Integration With Prognostics

et al. 2017

Self Cite

View full text Add to dashboard Cite

This version is available at https://strathprints.strath.ac.uk/60422/ Strathprints is designed to allow users to access the research output of the University of Strathclyde. Unless otherwise explicitly stated on the manuscript, Copyright © and Moral Rights for the papers on this site are retained by the individual authors and/or other copyright owners. Please check the manuscript for details of any other licences that may have been applied. You may not engage in further distribution of the material for any profitmaking activities or any commercial gain. You may freely distribute both the url (https://strathprints.strath.ac.uk/) and the content of this paper for research or private study, educational, or not-for-profit purposes without prior permission or charge.Any correspondence concerning this service should be sent to the Strathprints administrator: strathprints@strath.ac.ukThe Strathprints institutional repository (https://strathprints.strath.ac.uk) is a digital archive of University of Strathclyde research outputs. It has been developed to disseminate open access research outputs, expose data about those outputs, and enable the management and persistent access to Strathclyde's intellectual output. Abstract-The use of average data for dependability assessments results in a outdated system-level dependability estimation which can lead to incorrect design decisions. With increasing availability of online data, there is room to improve traditional dependability assessment techniques. Namely, prognostics is an emerging field which provides asset-specific failure information which can be reused to improve the system level failure estimation. This paper presents a framework for prognosticsupdated dynamic dependability assessment. The dynamic behaviour comes from runtime updated information, asset interdependencies, and time-dependent system behaviour. A case study from the power generation industry is analysed and results confirm the validity of the approach for improved near real-time unavailability estimations.

show abstract

Towards Dynamic Dependable Systems Through Evidence-Based Continuous Certification

Faqeh

Fetzer

Hermanns

et al. 2020

Leveraging Applications of Formal Methods, Verification and Validation: Engineering Principles

View full text Add to dashboard Cite

Future cyber-physical systems are expected to be dynamic, evolving while already being deployed. Frequent updates of software components are likely to become the norm even for safety-critical systems. In this setting, a full re-certification before each software update might delay important updates that fix previous bugs, or security or safety issues. Here we propose a vision addressing this challenge, namely through the evidence-based continuous supervision and certification of software variants in the field. The idea is to run both old and new variants of component software inside the same system, together with a supervising instance that monitors their behavior. Updated variants are phased into operation after sufficient evidence for correct behavior has been collected. The variants are required to explicate their decisions in a logical language, enabling the supervisor to reason about these decisions and to identify inconsistencies. To resolve contradictory information, the supervisor can run a component analysis to identify potentially faulty components on the basis of previously observed behavior, and can trigger micro-experiments which plan and execute system behavior specifically aimed at reducing uncertainty. We spell out our overall vision, and provide a first formalization of the different components and their interplay. In order to provide efficient supervisor reasoning as well as automatic verification of supervisor properties we introduce SupERLog, a logic specifically designed to this end.

show abstract

Application of the D3H2 Methodology for the Cost-Effective Design of Dependable Systems

Cited by 11 publications

References 37 publications

On Cost‐effective Reuse of Components in the Design of Complex Reconfigurable Systems

On Cost‐effective Reuse of Components in the Design of Complex Reconfigurable Systems

Improved Dynamic Dependability Assessment Through Integration With Prognostics

Towards Dynamic Dependable Systems Through Evidence-Based Continuous Certification

Contact Info

Product

Resources

About