Fault Injection in the Automotive Standard ISO 26262: An Initial Approach

Pintard, Ludovic; Fabre, Jean-Charles; Kanoun, Karama; Leeman, Michel; Roy, Matthieu

doi:10.1007/978-3-642-38789-0_11

Cited by 22 publications

(8 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…FI is strongly recommended by the functional safety standard ISO 26262 [ 35 ]. As demonstrated by Pintard et al [ 8 ], the FI method can be used on both sides of the ISO 26262 V-cycle.…”

Section: Background and Related Workmentioning

confidence: 99%

“…The method has also proven useful in the area of the robustness verification of safety mechanisms, i.e., evaluating the diagnostic coverage of a safety mechanism [ 7 ]. During the development process of automotive embedded software, FI can also be used to identify the threats to functional safety according to ISO 26262 at different levels and on both sides of the classical V-model [ 8 ].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Hardware-in-the-Loop-Based Real-Time Fault Injection Framework for Dynamic Behavior Analysis of Automotive Software Systems

Abboush

Bamal

Knieke

et al. 2022

Sensors

View full text Add to dashboard Cite

A well-known challenge in the development of safety-critical systems in vehicles today is that reliability and safety assessment should be rigorously addressed and monitored. As a matter of fact, most safety problems caused by system failures can lead to serious hazards and loss of life. Notwithstanding the existence of several traditional analytical techniques used for evaluation based on specification documents, a complex design, with its multivariate dynamic behavior of automotive systems, requires an effective method for an experimental analysis of the system’s response under abnormal conditions. Simulation-based fault injection (FI) is a recently developed approach to simulate the system behavior in the presence of faults at an early stage of system development. However, in order to analyze the behavior of the system accurately, comprehensively and realistically, the real-time conditions, as well as the dynamic system model of the vehicle, should be considered. In this study, a real-time FI framework is proposed based on a hardware-in-the-loop (HiL) simulation platform and a real-time electronic control unit (ECU) prototype. The framework is modelled in the MATLAB/Simulink environment and implemented in the HiL simulation to enable the analysis process in real time during the V-cycle development process. With the objective of covering most of the potential faults, nine different types of sensor and actuator control signal faults are injected programmatically into the HiL system as single and multiple faults without changing the original system model. Besides, the model of the whole system, containing vehicle dynamics with the environment system model, is considered with complete and comprehensive behavioral characteristics. A complex gasoline engine system is used as a case study to demonstrate the capabilities and advantages of the proposed framework. Through the proposed framework, transient and permanent faults are injected in real time during the operation of the system. Finally, experimental results show the effects of single and simultaneous faults on the system performance under a faulty mode compared to the golden running mode.

show abstract

“…FI is strongly recommended by the functional safety standard ISO 26262 [ 35 ]. As demonstrated by Pintard et al [ 8 ], the FI method can be used on both sides of the ISO 26262 V-cycle.…”

Section: Background and Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Hardware-in-the-Loop-Based Real-Time Fault Injection Framework for Dynamic Behavior Analysis of Automotive Software Systems

Abboush

Bamal

Knieke

et al. 2022

Sensors

View full text Add to dashboard Cite

show abstract

“…A injeção de falhas não substitui as demais estratégias de teste e verificação, mas as complementa. Ela é essencial para determinar se os requisitos de segurança especificados foram atingidos e se a tolerância a falhas implementada aumenta a segurança, confiabilidade e disponibilidade do sistema (Pintard et al 2013).…”

Section: Teste De Módulosunclassified

“…Na literatura, são encontrados alguns trabalhos de avaliação de tolerância a falhas em protocolos de comunicação ( (Dawson et al 1996), (Hurtig and Brunstrom 2008), (Siqueira et al 2009)). Também são encontrados trabalhos que discutem a importância da injeção de falhas no desenvolvimento e certificação de sistemas críticos, ( (Pintard et al 2013), (Cotroneo and Natella 2013)). Os trabalhos mais próximos do relatado aqui são injetores de falhas para redes de controle.…”

Section: Injeção De Falhas E Trabalhos Relacionadosunclassified

Arquitetura para injeção de falhas em protocolos de comunicação segura em aplicações críticas

Cechin

Weber²,

Netto³

2016

Anais Do XVII Workshop De Testes E Tolerância a Falhas (WTF 2016)

View full text Add to dashboard Cite

Em aplicações industriais críticas, falhas podem provocar a morte de pessoas ou danos irreparáveis ao meio ambiente. Devido ao ambiente hostil, a comunicação é um dos elos mais frágeis do sistema. A comunicação através de protocolos TCP/IP ou barramentos de campo apresenta taxas de defeito incompatíveis com os requisitos impostos a aplicações críticas. Quando o risco de acidentes fatais é muito alto, protocolos de comunicação segura, tais como o PROFIsafe, openSafety e o Safety-over-EtherCAT, devem ser empregados. Entretanto, para cada novo equipamento, o protocolo deve ser implementado e validado obedecendo estritamente às recomendações de normas de segurança como a IEC 61508 e a IEC 61784-3. As normas exigem injeção de falhas em todas as fases de teste. Para facilitar a aplicação destas normas por parte dos desenvolvedores e testadores, o artigo propõe a arquitetura de um ambiente de injeção de falhas para validação de protocolos de comunicação sugeridos pelas normas de segurança. Para atender aos requisitos de baixo custo e alta precisão, a arquitetura proposta baseia-se no uso de hardware genérico, com o emprego eventual de adaptadores de hardware, e de software específico.

show abstract

“…Particularly, the safety standard in automotive domain ISO-26262 recommends the usage of fault injection to verify the designed system in presence of faults throughout the whole design flow, starting from early design stages. As discussed in [133], fault injection may efficiently complement traditional dependability analysis processes in automotive development processes (like FMEA [135]). Nevertheless, as it will be detailed in Chapter 3, its integration into the design flow still faces important challenges related to the representativeness of involved fault models, accuracy of injection procedures, and experimentation performance.…”

Section: Dependability Assessmentmentioning

confidence: 99%

Dependability-driven Strategies to Improve the Design and Verification of Safety-Critical HDL-based Embedded Systems

Tuzov¹

View full text Add to dashboard Cite

show abstract

Fault Injection in the Automotive Standard ISO 26262: An Initial Approach

Cited by 22 publications

References 12 publications

Hardware-in-the-Loop-Based Real-Time Fault Injection Framework for Dynamic Behavior Analysis of Automotive Software Systems

Hardware-in-the-Loop-Based Real-Time Fault Injection Framework for Dynamic Behavior Analysis of Automotive Software Systems

Arquitetura para injeção de falhas em protocolos de comunicação segura em aplicações críticas

Dependability-driven Strategies to Improve the Design and Verification of Safety-Critical HDL-based Embedded Systems

Contact Info

Product

Resources

About