1st Edition
Design and Safety Assessment of Critical Systems
Introduction
Complex Safety-Critical Systems
Dealing with Failures: A Short History of Safety Engineering
The Role of Formal Methods
A Case Study: Three Mile Island
References
Dependability, Reliability, and Safety Assessment
Concepts
Classification of Faults
Fault Models
Managing Faults
Fault Detection
Fault Prediction
Fault Tolerance
Fault Coverage
Reliability Modeling
System Reliability
Techniques for Safety Assessment
Hazard Analysis
Risk Analysis
Risk Measures
Development of Safety-Critical Applications
What Makes a System Complex
What Makes the Development Complex
Measuring the Impact of Complexity
From System to Process
A General Development Framework
Development Workflow
Testing Workflow
Safety Assessment Workflow
Certification Management Workflow
Project Management Workflow
Tool Support
Improving the Process: Maturity Models
Formal Methods for Safety Assessment
Advantages of Formal Methods
Formal Methods in the Development Process
Problems and Limitations
History of Formal Methods
Formal Models and Specification
Formal Methods for Verification and Validation
Formal Safety Analysis
Industrial Applications of Formal Methods
Conclusions and Future Directions
Formal Methods for Certification
Certification of Avionic Systems
So Many Standards, So Little Time
The ECSS System of Standards
Avionics Reference Standards
ARP 4754
ARP 4761
DO-178B
The Case for the Safety Case
Formal Methods and Certification
References
Appendices:
The NuSMV Model Checker
The FSAP Safety Analysis Platform
Some Regulatory Bodies and Regulations
Index
Biography
Marco Bozzano is a senior researcher in the Embedded Systems Unit of Fondazione Bruno Kessler, Italy. He has strong expertise in the application of formal methods, and he has published a number of papers in the area of formal verification of safety critical systems.
Adolfo Villafiorita is a senior researcher at Fondazione Bruno Kessler. He has many years of experience in the application of formal methods in technology transfer projects and in the development of security and safety-critical applications. He is a contract professor at the University of Trento.
