Expressing Best Practices in (Risk) Analysis and Testing of Safety-Critical Systems Using Patterns

Abstract

The continuing pervasion of our society with safety-critical cyber-physical systems not only demands for adequate (risk) analysis, testing and verification techniques, it also generates growing experience on their use, which can be considered as important as the tools themselves for their efficient use. This paper introduces workflow patterns to describe such best practices in a systematic way that efficiently represents this knowledge, and also provides a way to relate different patterns, making them easier to identify and use, and cover as wide a range of experiences as possible. The value of the approach is demonstrated using some pattern examples from a collection developed in the Artemis-project MBAT 1 . Finally, the paper presents a wiki-based approach for developing and maintaining the pattern collection.

How to early integrate operational diagnosis objectives in model‐driven engineering processes: A methodological proposal based on fault and behavior trees

“…Some research work on risk analysis and MBDA has implicated the use of BPMN, but only for visualisation purposes that is, methodological process modeling, not executable behavior modeling. 10,11 We then turn to Finite State Machines (FSMs) -otherwise called Finite State Automata (FSA). FSMs consist the simplest modeling description of Discrete Event Systems, by providing a graphical representation of finite relations between the constituting system states.…”

“…The same goes for hierarchy: sub‐processes can be modeled inside other processes, but sub‐activities cannot be decomposed into sub‐activities. Some research work on risk analysis and MBDA has implicated the use of BPMN, but only for visualisation purposes that is, methodological process modeling, not executable behavior modeling 10,11 …”

Security Requirements as Code: Example from VeriDevOps Project

“…We then decided to find contributions that cite the work of Feudjio [48]. Herzner et al [55] present an approach for capturing best practices in integrating risk and safety analysis and testing by means of analysis and testing (A&T) patterns. Each A&T pattern encompasses a dedicated workflow starting from analysis down to test steps for achieving certain qualities of the system.…”

A Large-Scale Technology Evaluation Study: Effects of Model-based Analysis and Testing

“…According to a bottom-up strategy, use-case-specific solutions were generalized towards a set of best practices for the model-based QA of software-intensive technical systems. A set of patterns for the usage and instantiation of the combined QA approaches was developed, representing appropriate solutions for defined application domains, quality properties, and process stages [14]. One concrete instantiation is the integrated quality assurance framework (InQA), which enables the stepwise optimization of QA planning and control, taking into account heterogeneous quality objectives such as the coverage of requirements and architectural models and the detection of the most critical and frequent defects [11].…”