In this paper, we provide a review of Professor Powers's and his students' work on connecting fault analysis, discrete process control, human operating procedures, and symbolic model checking. In recent years, this type of research is placed under the banner of "cyber-physical systems research". Some of the techniques and procedures Powers and his students developed can be found in the open literature and conference proceedings. However, they have not been published broadly due to the untimely passing of Professor Powers. A complete overview of the methods are not available, and the cap-stone results obtained in the two last Ph.D. theses have not been published.
■ INTRODUCTION AND LITERATURE REVIEWProfessor Powers's research at Carnegie Mellon University centered on design research and systems analysis. In particular, he was interested in developing rigorous methods for chemical process risk and reliability assessment. Rigorous means that a system consisting of chemical processes, discrete and continuous control logic, and human operator intervention would be provably correct with respect to a given set of specifications. Such specifications would include the property that a safe shut down procedure can always be executed, unsafe states are avoided, and failure of critical measurements do not lead to unsafe conditions. The strength of the method is that very large systems with 10 20 states and more can be verified. 1 However, realistic problems may have much larger state spaces. Modular decompositions are needed, and great care must be taken to make sure that the models and specifications have sufficiently rich structure to capture all eventualities. These problems were recognized in Professor Powers's research and in his later research methods were developed for modular construction of very complex systems combining automation and human operator intervention using the verification-operating procedure language (V-OPL). 2,3,4,5 The key idea behind this seminal work was that logic faults in real-time control systems and operating procedures for chemical processes could be found by combining discrete state models of systems with model checking. In particular, Powers and his students showed that efficient strategies for reliability analysis could be developed using formal methods for model checking developed in the Department of Computer Science at Carnegie Mellon University by Professor Edmund Clarke and his students. The work was distinct from parallel work in the area of discrete event control systems and supervisor synthesis. 6 Powers and his students focused on the analysis of existing control systems and operating procedures, whereas the work in the area of supervisory control focused on how to synthesize control systems. The application domain, namely chemical process control, also presented unique challenges.The earliest ideas were described in the paper by Moon, Powers, Burch, and Clarke. 7 In this paper, the authors showed how the model checking tool SMV (symbolic model verifier) could be used to model an...