Specification method based on temporal SADT and deterministic/stochastic Petri nets. Application to safety assessment

Reducing redesign of safety critical control systems by early risk assessment

“…A few of these papers claim to improve safety ( [19], [20], [21], [22]) without mentioning any safety measure or safety standard. [23] claims to follow IEC 61508 in the very limited sense that the standard recommends a V-model.…”

“…[23] claims to follow IEC 61508 in the very limited sense that the standard recommends a V-model. The system properties that are studied, such as boundedness, liveness and reachability [19], are orthogonal to the measures defined by safety standards, so none of these approaches in their current form can answer questions such as "What is the required SIL for our application? ", or "Does this application or part of it satisfy a particular SIL?…”

Early phase fault propagation analysis of safety critical factory automation systems

“…Out of the body of literature on formal verification and modeling of software and systems, only a few papers actually claim to improve safety ( [15,[17][18][19]), even though the linkage to risk assessment, required by all safety standards, is not made. Some of these methods cover both software and the equipment under control [20] [21].…”