Design Pattern Representation for Safety-Critical Embedded Systems

Armoush, Ashraf; Salewski, Falk; Kowalewski, Stefan

doi:10.4236/jsea.2009.21001

Cited by 14 publications

(13 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…e.g. [13]. The variety of possibilities is illustrated by the following three concepts: Consists of two different paths, a nominal path (n-Path) and a safety path (s-Path) in hot-standby mode.…”

Section: Technical Safety Conceptsmentioning

confidence: 99%

Safety analysis for vehicle guidance systems with dynamic fault trees

Ghadhab

Junges

Katoen

et al. 2019

Reliability Engineering & System Safety

View full text Add to dashboard Cite

This paper considers the design-phase safety analysis of vehicle guidance systems. The proposed approach constructs dynamic fault trees (DFTs) to model a variety of safety concepts and E/E architectures for drive automation. The fault trees can be used to evaluate various quantitative measures by means of model checking. The approach is accompanied by a large-scale evaluation: The resulting DFTs with up to 300 elements constitute larger-than-before DFTs, yet the concepts and architectures can be evaluated in a matter of minutes. Figure 1: Overview of the model-based safety approachfunctions with a sufficiently low probability of undetected dangerous hardware failures. This paper considers the design-phase safety analysis of the vehicle guidance system, a key functional block of a vehicle with a high safety integrity level (ASIL D, i.e., allowing not more than 10 −8 residual hardware failures per hour). The key point of our approach is to: (1) manually construct dynamic fault trees [2] (DFTs) from industrial system descriptions and combine them (in an automated manner) with hardware failure models for several partitionings of functions on hardware, and (2) analyse the resulting overall DFTs by means of probabilistic model checking [3,4,5].A model-based approach. Fig. 1 summarises the approach, in relation to the structure of this paper. The failure behaviour of the functional architecture, given as a functional block diagram (FBD), is expressed as a two-level DFT: the upper level models a system failure in terms of block failures B i while the lower level models the causes of block failures B i . The use of fault trees is natural: They are a well-known model in reliability engineering. No familiarity with additional formalisms is required. Fault trees for hardware components are typically provided by manufacturers. Failures in function blocks can easily be described by fault trees. The use of DFTs rather than static fault trees allows to model warm and cold redundancies, spare components, and state-dependent faults; cf. [6]. Each functional block is assigned to a hardware platform for which (by assumption) a provided DFT H i models its failure behaviour. Depending on the partitioning, the communication goes via different fallible buses that are also modelled by DFTs Bus i . From the partitioning, and the DFTs of the hardware and the functional level, an overall DFT is constructed (in an automated manner) consisting of three layers: (1) the system layer; (2) the block layer; and (3) the hardware layer. Details are discussed in Sect. 4.Analysis. We exploit probabilistic model checking (PMC) [3,4,5] to analyse the DFT of the overall vehicle guidance system. PMC can be used as a black-box algorithm-no expertise in PMC is needed to understand its outcomes-and supports various metrics that go beyond reliability and MTTF [7]. While they are all expressible by a combination of PMC queries, the number of queries is prohibitively large for some measures relevant for the safety analysis of highly automated cars. Therefore, w...

show abstract

Section: Technical Safety Conceptsmentioning

confidence: 99%

Safety analysis for vehicle guidance systems with dynamic fault trees

Ghadhab

Junges

Katoen

et al. 2019

Reliability Engineering & System Safety

View full text Add to dashboard Cite

show abstract

“…A pattern describing a generalized version of this pattern is given in [46], which also includes Recovery Blocks, Consensus Recovery Blocks, Acceptance Voting, and N-Self Checking Programming. An Acceptance Voting pattern is described in [3]. Liu [47] presented several software versions of some of these algorithms.…”

Section: Reliability Patternsmentioning

confidence: 99%

“…This pattern includes N programs running in parallel to perform the same task on the same input to produce N outputs. The output of each version is presented to an acceptance test to check it for correctness [3].…”

Section: A Reliability Patterns Descriptionsmentioning

confidence: 99%

Reliability Patterns: A Survey

Fernández¹,

Buckley²

2019

Proceedings of the 17th LACCEI International Multi-Conference for Engineering, Education, and Technology: “Industry, Innovation

View full text Add to dashboard Cite

This study presents an enumeration and evaluation of reliability patterns. We first catalog these patterns to make them accessible and useful to software developers and system designers. The objective here is to identify areas for which there are no patterns or the existing patterns are not complete enough to be useful to software designers. The patterns are classified based on the reliability properties they provide. As examples of our methodology we evaluate some of the patterns discussed in this survey.

show abstract

“…Porém, este artigo não aborda especificamente requisitos de segurança para tais sistemas, o que é citado por outros trabalhos como um fator importante de se considerar desde o projeto de um sistema embarcado até sua concepção. É o caso do trabalho apresentado em Armoush et al (2009) que, tendo em vista requisitos de segurança, busca estabelecer design patterns para fornecer soluções abstratas a problemas comumente encontrados enquanto projetando um sistema embarcado. Para desenvolver sistemas críticos, faz-se necessário integrar os já consolidados métodos de projeto utilizados em hardware e software, sem esquecer de considerar requisitos de segurança e processos que garantam a qualidade dos módulos desenvolvidos.…”

Section: Trabalhos Correlatosunclassified

Segurança em sistemas embarcados críticos - utilização de criptografia para comunicação segura

Pigatto¹

View full text Add to dashboard Cite

AgradecimentosAos meus pais, Agenor e Dinora que nunca mediram esforços para que hoje eu pudesse estar finalizando mais este projeto. Ficam meus agradecimentos pelo apoio moral e financeiro e por acreditarem na minha capacidade de concluir um mestrado. À minha irmã Fernanda e aos demais familiares por terem depositado em mim suas esperanças e por todo apoio moral nestes dois anos.À amizade e orientação da Prof a Dr a Kalinka Regina Lucas Jaquie Castelo Branco, que me acolheu desde o primeiro dia em São Carlos e me orientou em questões técnicas e até mesmo em momentos de dificuldades pessoais. Agradeço todo o empenho e competência para que este projeto pudesse se tornar realidade e todas as horas dedicadas a me ajudar a construir uma consciência acadêmica ampla, sólida e ética.Aos colegas de LaSDPC e LSEC: e muitos outros que certamente faltarão nesta lista.Aos colegas de república, que dividiram diversos momentos de estudo e de descontração: Alessandro Nakamuta, Bruno Guazzelli Batista, Bruno Tardiole Kuehne, Gabriel Massote Prado, João Paulo Orlando e Paulo Sérgio Franco Eustáquio.A quatro colegas que tiveram contribuições mais específicas: João Paulo Orlando pela parceria no início de uma nova fase em cidade e universidade novas; Natássya da Silva pelas contribuições diretas na parte de implementação do meu projeto durante o desenvolvimento de seus projetos de IC e TCC; Renê de Souza Pinto pelo apoio na parte de hardware e de preparação do ambiente de experimentos; e Rayner de Melo Pires que dedicou horas de trabalho para me ajudar a concluir este projeto com sucesso.i Aos docentes do ICMC, em especial do Grupo de Sistemas Distribuídos, que sempre contribuíram em seminários e em disciplinas cursadas.Aos alunos de graduação da Universidade de São Paulo que desenvolveram iniciações científicas e trabalhos de conclusão de curso dos quais eu pude participar ativamente: Natássya

show abstract

Design Pattern Representation for Safety-Critical Embedded Systems

Cited by 14 publications

References 20 publications

Safety analysis for vehicle guidance systems with dynamic fault trees

Safety analysis for vehicle guidance systems with dynamic fault trees

Reliability Patterns: A Survey

Segurança em sistemas embarcados críticos - utilização de criptografia para comunicação segura

Contact Info

Product

Resources

About