首页 > 最新文献

Journal of System Safety最新文献

英文 中文
Proposing the Use of Hazard Analysis for Machine Learning Data Sets 建议在机器学习数据集上使用危害分析
Pub Date : 2023-06-22 DOI: 10.56094/jss.v58i2.253
H. Carter, Alexander Chan, Christopher Vinegar, J. Rupert
There is no debating the importance of data for artificial intelligence. The behavior of data-driven machine learning models is determined by the data set, or as the old adage states: “garbage in, garbage out (GIGO).” While the machine learning community is still debating which techniques are necessary and sufficient to assess the adequacy of data sets, they agree some techniques are necessary. In general, most of the techniques being considered focus on evaluating the volumes of attributes. Those attributes are evaluated with respect to anticipated counts of attributes without considering the safety concerns associated with those attributes. This paper explores those techniques to identify instances of too little data and incorrect attributes. Those techniques are important; however, for safety critical applications, the assurance analyst also needs to understand the safety impact of not having specific attributes present in the machine learning data sets. To provide that information, this paper proposes a new technique the authors call data hazard analysis. The data hazard analysis provides an approach to qualitatively analyze the training data set to reduce the risk associated with the GIGO.
数据对人工智能的重要性是毋庸置疑的。数据驱动的机器学习模型的行为是由数据集决定的,或者正如一句古老的谚语所说:“垃圾输入,垃圾输出(GIGO)”。虽然机器学习社区仍在争论哪些技术是必要的,足以评估数据集的充分性,但他们同意一些技术是必要的。一般来说,考虑的大多数技术都侧重于评估属性的数量。这些属性是根据预期的属性计数来评估的,而不考虑与这些属性相关的安全问题。本文探讨了这些技术来识别数据过少和属性不正确的实例。这些技巧很重要;然而,对于安全关键应用程序,保证分析师还需要了解机器学习数据集中没有特定属性对安全的影响。为了提供这些信息,本文提出了一种新的技术,作者称之为数据危害分析。数据危害分析提供了一种定性分析训练数据集的方法,以减少与GIGO相关的风险。
{"title":"Proposing the Use of Hazard Analysis for Machine Learning Data Sets","authors":"H. Carter, Alexander Chan, Christopher Vinegar, J. Rupert","doi":"10.56094/jss.v58i2.253","DOIUrl":"https://doi.org/10.56094/jss.v58i2.253","url":null,"abstract":"There is no debating the importance of data for artificial intelligence. The behavior of data-driven machine learning models is determined by the data set, or as the old adage states: “garbage in, garbage out (GIGO).” While the machine learning community is still debating which techniques are necessary and sufficient to assess the adequacy of data sets, they agree some techniques are necessary. In general, most of the techniques being considered focus on evaluating the volumes of attributes. Those attributes are evaluated with respect to anticipated counts of attributes without considering the safety concerns associated with those attributes. This paper explores those techniques to identify instances of too little data and incorrect attributes. Those techniques are important; however, for safety critical applications, the assurance analyst also needs to understand the safety impact of not having specific attributes present in the machine learning data sets. To provide that information, this paper proposes a new technique the authors call data hazard analysis. The data hazard analysis provides an approach to qualitatively analyze the training data set to reduce the risk associated with the GIGO.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"39 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114954885","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Human Reliability Analysis using a Human Factors Hazard Model 基于人因危害模型的人的可靠性分析
Pub Date : 2023-06-22 DOI: 10.56094/jss.v58i2.251
Dustin S. Birch, Erika E. Miller, Thomas H. Bradley
Human Reliability Analysis (HRA) has found application within a diverse set of engineering domains, but the methods used to apply HRA are often complicated, time-consuming, costly to apply, specific to particular (i.e., nuclear) applications, and are not suitable for direct comparison amongst themselves. This paper proposes a Human Factors Hazard Model (HFHM), which builds an HRA method from the tools of Fault Tree Analysis (FTA), Event Tree Analysis (ETA), and a novel model of considering serial Human Error Probability (HEP) more relevant to psychomotor-intensive industrial and commercial applications such as manufacturing, teleoperation, and vehicle operation. The HEP approach uses Performance Shaping Factors (PSFs) relevant to human behavior, as well as specific characteristics unique to a system architecture and its corresponding operational behavior. The HFHM tool is intended to establish a common analysis approach, to simplify and automate the modeling of the likelihood of a mishap due to a human-system interaction during a hazard event. The HFHM is executed commercial software tools (MS Excel and SysML) such that trade and sensitivity studies can be conducted and iterated automatically. The results generated by the HFHM can be used to guide risk assessment, safety requirements generation and management, design options, and safety controls within the system design architecting process. Verification and evaluation of the HFHM through simulation and subject matter expert evaluation illustrate the value of the HFHM as a tool for HRA and system safety analysis in a set of key industrial applications.
人类可靠性分析(HRA)已经在不同的工程领域中得到了应用,但是用于应用HRA的方法通常是复杂的,耗时的,昂贵的,特定于特定的(例如核)应用,并且不适合在它们之间进行直接比较。基于故障树分析(FTA)、事件树分析(ETA)等工具,构建了一种基于故障树分析(HRA)方法的人因危害模型(HFHM),并提出了一种考虑系列人为错误概率(HEP)的新模型,该模型更适用于制造、远程操作和车辆操作等精神运动密集型工业和商业应用。HEP方法使用与人类行为相关的性能塑造因子(psf),以及系统架构及其相应的操作行为所特有的特定特征。HFHM工具旨在建立一种通用的分析方法,以简化和自动化在危险事件中由于人类系统相互作用而发生事故的可能性的建模。HFHM是由商业软件工具(MS Excel和SysML)执行的,这样就可以自动进行贸易和敏感性研究。HFHM生成的结果可用于指导系统设计架构过程中的风险评估、安全需求生成和管理、设计选项和安全控制。通过仿真和主题专家评估对HFHM进行验证和评估,说明了HFHM作为HRA和系统安全分析工具在一系列关键工业应用中的价值。
{"title":"Human Reliability Analysis using a Human Factors Hazard Model","authors":"Dustin S. Birch, Erika E. Miller, Thomas H. Bradley","doi":"10.56094/jss.v58i2.251","DOIUrl":"https://doi.org/10.56094/jss.v58i2.251","url":null,"abstract":"Human Reliability Analysis (HRA) has found application within a diverse set of engineering domains, but the methods used to apply HRA are often complicated, time-consuming, costly to apply, specific to particular (i.e., nuclear) applications, and are not suitable for direct comparison amongst themselves. \u0000This paper proposes a Human Factors Hazard Model (HFHM), which builds an HRA method from the tools of Fault Tree Analysis (FTA), Event Tree Analysis (ETA), and a novel model of considering serial Human Error Probability (HEP) more relevant to psychomotor-intensive industrial and commercial applications such as manufacturing, teleoperation, and vehicle operation. The HEP approach uses Performance Shaping Factors (PSFs) relevant to human behavior, as well as specific characteristics unique to a system architecture and its corresponding operational behavior. The HFHM tool is intended to establish a common analysis approach, to simplify and automate the modeling of the likelihood of a mishap due to a human-system interaction during a hazard event. \u0000The HFHM is executed commercial software tools (MS Excel and SysML) such that trade and sensitivity studies can be conducted and iterated automatically. The results generated by the HFHM can be used to guide risk assessment, safety requirements generation and management, design options, and safety controls within the system design architecting process. Verification and evaluation of the HFHM through simulation and subject matter expert evaluation illustrate the value of the HFHM as a tool for HRA and system safety analysis in a set of key industrial applications.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"49 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131593747","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Review of the Latest Developments in Automotive Safety Standardization for Driving Automation Systems 汽车自动驾驶系统安全标准化研究进展综述
Pub Date : 2023-06-22 DOI: 10.56094/jss.v58i2.252
R. Debouk
The ISO 26262: Functional Safety – Road Vehicles Standard has been the de-facto automotive functional safety standard since it was first released in 2011. With the introduction of complex driving automation systems, new standardization efforts to deal with safety of these systems have been initiated to address emerging gaps such as the human/automation roles and responsibilities in the presence/absence of the driver/user, the impact of the technological limitations and the verification and validation needs of automation systems to name a few. This paper highlights some of these gaps and introduces some of the latest developments in automotive safety standardization for driving automation systems.
自2011年首次发布以来,ISO 26262:功能安全-道路车辆标准一直是事实上的汽车功能安全标准。随着复杂驾驶自动化系统的引入,新的标准化工作已经开始处理这些系统的安全性,以解决新出现的差距,例如驾驶员/用户在场/不在场时的人/自动化角色和责任,技术限制的影响以及自动化系统的验证和验证需求等等。本文强调了其中的一些差距,并介绍了驾驶自动化系统汽车安全标准化的一些最新进展。
{"title":"Review of the Latest Developments in Automotive Safety Standardization for Driving Automation Systems","authors":"R. Debouk","doi":"10.56094/jss.v58i2.252","DOIUrl":"https://doi.org/10.56094/jss.v58i2.252","url":null,"abstract":"The ISO 26262: Functional Safety – Road Vehicles Standard has been the de-facto automotive functional safety standard since it was first released in 2011. With the introduction of complex driving automation systems, new standardization efforts to deal with safety of these systems have been initiated to address emerging gaps such as the human/automation roles and responsibilities in the presence/absence of the driver/user, the impact of the technological limitations and the verification and validation needs of automation systems to name a few. This paper highlights some of these gaps and introduces some of the latest developments in automotive safety standardization for driving automation systems.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121985565","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
System Safety Bookshelf 系统安全书架
Pub Date : 2023-02-22 DOI: 10.56094/jss.v58i1.214
Malcolm Jones
Over many decades System Safety has evolved from a more re-active nature - learning from failures and improving – not really suitable for high consequence enterprises - to today’s more pro-active form. This is now based on better fundamental understanding, better assessment processes, better standards, more comprehensive analysis tools with better audit and regulation procedures. However, unlike ‘set educational subjects’ such as engineering, science, technology and mathematics, there are less opportunities for formal System Safety education and training in academia and elsewhere, even though system safety impacts on all aspects of life. One hopes that this will continue to be rectified. This leads us directly to the importance and value of this book, which gives a complete insight into the nature of what System Safety is all about, including its approaches, methodologies and tools, and which provides guidance on the successful application of a comprehensive, pro-active approach for ensuring safe system design.
几十年来,系统安全已经从一种更被动的性质——从失败中学习和改进——并不真正适合高后果企业——发展到今天更主动的形式。现在,这是基于更好的基本理解、更好的评估流程、更好的标准、更全面的分析工具以及更好的审计和监管程序。然而,与工程、科学、技术和数学等“固定教育科目”不同,尽管系统安全对生活的各个方面都有影响,但在学术界和其他地方进行正式的系统安全教育和培训的机会较少。人们希望这种情况将继续得到纠正。这导致我们直接到这本书的重要性和价值,它给出了一个完整的洞察本质是什么系统安全是所有关于,包括它的方法,方法和工具,并提供指导成功应用全面,积极主动的方法,以确保安全的系统设计。
{"title":"System Safety Bookshelf","authors":"Malcolm Jones","doi":"10.56094/jss.v58i1.214","DOIUrl":"https://doi.org/10.56094/jss.v58i1.214","url":null,"abstract":"Over many decades System Safety has evolved from a more re-active nature - learning from failures and improving – not really suitable for high consequence enterprises - to today’s more pro-active form. This is now based on better fundamental understanding, better assessment processes, better standards, more comprehensive analysis tools with better audit and regulation procedures. However, unlike ‘set educational subjects’ such as engineering, science, technology and mathematics, there are less opportunities for formal System Safety education and training in academia and elsewhere, even though system safety impacts on all aspects of life. One hopes that this will continue to be rectified. This leads us directly to the importance and value of this book, which gives a complete insight into the nature of what System Safety is all about, including its approaches, methodologies and tools, and which provides guidance on the successful application of a comprehensive, pro-active approach for ensuring safe system design.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123839227","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Difficulties with Replacing Crew Launch Abort Systems with Designed Reliability 替换具有设计可靠性的机组发射中止系统的困难
Pub Date : 2023-02-22 DOI: 10.56094/jss.v58i1.216
S. Ryan
As the space industry continues to innovate and new paradigms arise to challenge the status quo, human spaceflight is now perceived as safer and more accessible than ever before. This has led to a new line of thinking in which crewed launch vehicles should be reusable and reliable like commercial airplanes, forgoing the need for an abort system. This paper will counter that line of thought with an analysis of the spectrum of coverage historical crew abort systems provided during launch and use historical data from launch rate successes and failures to glean insight into what reliability in the human spaceflight industry can expect when designing the vehicles of the future. This historical launch vehicle reliability will then be compared to system safety standards used in the commercial aviation industry to understand if future designs truly need a crew abort system. Through this analysis, the rationale for why these crew abort systems have historically been used can be better understood.
随着航天工业的不断创新和新模式的出现挑战现状,人类航天飞行现在被认为比以往任何时候都更安全,更容易进入。这导致了一种新的思路,即载人运载火箭应该像商用飞机一样可重复使用和可靠,放弃对中止系统的需要。本文将通过分析发射过程中提供的历史船员中止系统的覆盖范围,并使用发射成功率和失败率的历史数据来收集洞察人类航天工业在设计未来飞行器时可以期望的可靠性,从而反驳这一思路。然后将这一历史运载火箭的可靠性与商用航空工业中使用的系统安全标准进行比较,以了解未来的设计是否真的需要机组人员中止系统。通过这一分析,可以更好地理解为什么这些机组中止系统在历史上被使用。
{"title":"Difficulties with Replacing Crew Launch Abort Systems with Designed Reliability","authors":"S. Ryan","doi":"10.56094/jss.v58i1.216","DOIUrl":"https://doi.org/10.56094/jss.v58i1.216","url":null,"abstract":"As the space industry continues to innovate and new paradigms arise to challenge the status quo, human spaceflight is now perceived as safer and more accessible than ever before. This has led to a new line of thinking in which crewed launch vehicles should be reusable and reliable like commercial airplanes, forgoing the need for an abort system. This paper will counter that line of thought with an analysis of the spectrum of coverage historical crew abort systems provided during launch and use historical data from launch rate successes and failures to glean insight into what reliability in the human spaceflight industry can expect when designing the vehicles of the future. This historical launch vehicle reliability will then be compared to system safety standards used in the commercial aviation industry to understand if future designs truly need a crew abort system. Through this analysis, the rationale for why these crew abort systems have historically been used can be better understood.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133152628","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Quantification of Benefits for Medical Devices 医疗器械效益的量化
Pub Date : 2023-02-22 DOI: 10.56094/jss.v58i1.217
B. Elahi
One of the most prominent challenges in safety risk management of medical devices is the Benefit-Risk Analysis. This paper proposes a methodology to quantify benefits, thereby creating more consistency, and explainability in the evaluation of benefits and the benefit/risk ratio. Leveraging the guidance from the FDA, we define four Dimensions for appraising benefits. The product of the rankings of a benefit in all four Dimensions is used as a quantitative measure of a benefit. The quantitative score for the overall benefit of a medical device would be the sum of the scores of the individual benefits.
效益-风险分析是医疗器械安全风险管理中最突出的挑战之一。本文提出了一种量化效益的方法,从而在效益和效益/风险比的评估中创造更多的一致性和可解释性。利用FDA的指导,我们定义了评估效益的四个维度。在所有四个维度上的收益排名的乘积被用作收益的定量度量。医疗器械总体效益的定量评分将是个体效益评分的总和。
{"title":"Quantification of Benefits for Medical Devices","authors":"B. Elahi","doi":"10.56094/jss.v58i1.217","DOIUrl":"https://doi.org/10.56094/jss.v58i1.217","url":null,"abstract":"One of the most prominent challenges in safety risk management of medical devices is the Benefit-Risk Analysis. This paper proposes a methodology to quantify benefits, thereby creating more consistency, and explainability in the evaluation of benefits and the benefit/risk ratio. \u0000Leveraging the guidance from the FDA, we define four Dimensions for appraising benefits. The product of the rankings of a benefit in all four Dimensions is used as a quantitative measure of a benefit. \u0000The quantitative score for the overall benefit of a medical device would be the sum of the scores of the individual benefits.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"37 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124353656","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Incremental Assurance Through Eliminative Argumentation 通过排除论证的增量保证
Pub Date : 2023-02-22 DOI: 10.56094/jss.v58i1.215
Simon Diemert, John Goodenough, Jeffrey J. Joyce, C. Weinstock
An assurance case for a critical system is valid for that system at a particular point in time, such as when the system is delivered to a certification authority for review. The argument is structured around evidence that exists at that point in time. However, modern assurance cases are rarely one-off exercises. More information might become available (e.g., field data) that could strengthen (or weaken) the validity of the case. This paper proposes the notion of incremental assurance wherein the assurance case structure includes both the currently available evidence and a plan for incrementally increasing confidence in the system as additional or higher quality evidence becomes available. Such evidence is needed to further reduce doubts engineers or reviewers might have. This paper formalizes the idea of incremental assurance through an argumentation pattern. The concept of incremental assurance is demonstrated by applying the pattern to part of a safety assurance case for an air traffic control system.
关键系统的保证案例在特定时间点对该系统有效,例如当系统交付给认证机构进行审查时。论点是围绕在那个时间点存在的证据构建的。然而,现代的鉴证案例很少是一次性的。可能会获得更多的信息(例如,实地数据),这些信息可能会加强(或削弱)案例的有效性。本文提出了增量保证的概念,其中保证案例结构既包括当前可用的证据,也包括随着额外或更高质量的证据变得可用而逐步增加系统信心的计划。需要这样的证据来进一步减少工程师或审稿人可能产生的疑虑。本文通过一个论证模式形式化了增量保证的概念。通过将该模式应用于空中交通管制系统的部分安全保证案例,演示了增量保证的概念。
{"title":"Incremental Assurance Through Eliminative Argumentation","authors":"Simon Diemert, John Goodenough, Jeffrey J. Joyce, C. Weinstock","doi":"10.56094/jss.v58i1.215","DOIUrl":"https://doi.org/10.56094/jss.v58i1.215","url":null,"abstract":"An assurance case for a critical system is valid for that system at a particular point in time, such as when the system is delivered to a certification authority for review. The argument is structured around evidence that exists at that point in time. However, modern assurance cases are rarely one-off exercises. More information might become available (e.g., field data) that could strengthen (or weaken) the validity of the case. This paper proposes the notion of incremental assurance wherein the assurance case structure includes both the currently available evidence and a plan for incrementally increasing confidence in the system as additional or higher quality evidence becomes available. Such evidence is needed to further reduce doubts engineers or reviewers might have. This paper formalizes the idea of incremental assurance through an argumentation pattern. The concept of incremental assurance is demonstrated by applying the pattern to part of a safety assurance case for an air traffic control system.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"66 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-02-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116666855","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Assessing the Software Control Autonomy of System Functions in Safety-Critical Systems 安全关键系统中系统功能的软件控制自主性评估
Pub Date : 2022-10-04 DOI: 10.56094/jss.v57i3.206
V. Tran, V. Tran, L. Tran
Software Control Category (SCC) denotes the degree of control autonomy, command and control authority, and redundant fault tolerance software has over hazardous system functions of safety-critical systems. The use of SCC for determining the software contribution to system risks is a unique feature of the MIL-STD-882E System Safety Standard. A lower SCC designation means that the software system has a greater control autonomy over hazardous system functions, whereas SCC 1 means complete autonomous control. Software with greater control autonomy over hazardous system functions require greater effort to assure reliability and safety. Correct assessment of the SCC level of hazardous system functions is crucial for optimizing the safety property of a system developed under budget, schedule, and resource constraints. Beyond the categorical definitions provided by the MIL-STD-882E Standard, there is little information on conducting an SCC assessment. To close this knowledge gap, we present an SCC assessment method. Our paper will describe in detail the process and rules for assessing SCC. For illustration, we apply our method to assess the SCC of several safety-significant functions of an automobile’s brake-assist system.
软件控制类别(Software Control Category, SCC)表示对安全关键系统的危险系统功能的控制自主性、指挥控制权限和冗余容错软件的程度。使用SCC来确定软件对系统风险的贡献是MIL-STD-882E系统安全标准的一个独特功能。较低的SCC标识意味着软件系统对危险系统功能具有更大的控制自主权,而SCC 1意味着完全自主控制。对危险系统功能具有更大控制自主权的软件需要更大的努力来确保可靠性和安全性。正确评估危险系统功能的SCC水平对于优化在预算、进度和资源限制下开发的系统的安全性能至关重要。除了MIL-STD-882E标准提供的分类定义之外,很少有关于进行SCC评估的信息。为了缩小这一知识差距,我们提出了一种SCC评估方法。本文将详细介绍SCC的评估过程和规则。为了说明,我们应用我们的方法来评估汽车制动辅助系统的几个安全重要功能的SCC。
{"title":"Assessing the Software Control Autonomy of System Functions in Safety-Critical Systems","authors":"V. Tran, V. Tran, L. Tran","doi":"10.56094/jss.v57i3.206","DOIUrl":"https://doi.org/10.56094/jss.v57i3.206","url":null,"abstract":"Software Control Category (SCC) denotes the degree of control autonomy, command and control authority, and redundant fault tolerance software has over hazardous system functions of safety-critical systems. The use of SCC for determining the software contribution to system risks is a unique feature of the MIL-STD-882E System Safety Standard. A lower SCC designation means that the software system has a greater control autonomy over hazardous system functions, whereas SCC 1 means complete autonomous control. Software with greater control autonomy over hazardous system functions require greater effort to assure reliability and safety. Correct assessment of the SCC level of hazardous system functions is crucial for optimizing the safety property of a system developed under budget, schedule, and resource constraints. Beyond the categorical definitions provided by the MIL-STD-882E Standard, there is little information on conducting an SCC assessment. To close this knowledge gap, we present an SCC assessment method. Our paper will describe in detail the process and rules for assessing SCC. For illustration, we apply our method to assess the SCC of several safety-significant functions of an automobile’s brake-assist system.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"69 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126680709","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Global Warming and System Safety 全球变暖与系统安全
Pub Date : 2022-10-04 DOI: 10.56094/jss.v57i3.205
Malcolm Jones
We are currently confronted with the existential challenge of global warning. Because of its nature it is a challenge that confronts the entire globe both in terms of contributing factors and bearing the consequences. In both aspects there is an inevitable balance of responsibilities and consequences. In the former, some national entities are bigger contributors to the problem than others and in a similar manner some global areas suffer relatively more significant negative consequences. Another major challenge has been that of generating a better scientific understanding of the relationships between greenhouse gas emission, global warming, and the resulting environmental consequences. The remaining challenges that follow are how best to prevent or minimise greenhouse gas emissions, how to store them safety and how to mitigate the potential negative consequences. These are now global level responsibilities. At first sight this appears to be a problem restricted to big science, technology, and engineering alone in terms of finding more acceptable forms of energy production, as a counter to our current dependence on fossil fuels and that it might not be an area where system safety can play a prominent part. However, this is not the case, and this paper explores the system safety application possibilities, because all new developments require to be implemented in a safe manner.
我们目前面临着全球变暖的生存挑战。由于其性质,它是整个全球在促成因素和承担后果方面面临的挑战。在这两个方面都有责任和后果的必然平衡。在前一种情况下,一些国家实体比其他国家实体造成的问题更大,以同样的方式,一些全球地区遭受相对更严重的负面后果。另一项重大挑战是对温室气体排放、全球变暖以及由此产生的环境后果之间的关系产生更好的科学理解。接下来的挑战是如何最好地防止或尽量减少温室气体排放,如何安全地储存它们以及如何减轻潜在的负面后果。这些现在是全球级别的责任。乍一看,这似乎是一个仅限于寻找更可接受的能源生产形式的大科学、技术和工程的问题,以对抗我们目前对化石燃料的依赖,这可能不是一个系统安全可以发挥突出作用的领域。然而,情况并非如此,本文探讨了系统安全应用的可能性,因为所有新的发展都需要以安全的方式实现。
{"title":"Global Warming and System Safety","authors":"Malcolm Jones","doi":"10.56094/jss.v57i3.205","DOIUrl":"https://doi.org/10.56094/jss.v57i3.205","url":null,"abstract":"We are currently confronted with the existential challenge of global warning. Because of its nature it is a challenge that confronts the entire globe both in terms of contributing factors and bearing the consequences. In both aspects there is an inevitable balance of responsibilities and consequences. In the former, some national entities are bigger contributors to the problem than others and in a similar manner some global areas suffer relatively more significant negative consequences. Another major challenge has been that of generating a better scientific understanding of the relationships between greenhouse gas emission, global warming, and the resulting environmental consequences. The remaining challenges that follow are how best to prevent or minimise greenhouse gas emissions, how to store them safety and how to mitigate the potential negative consequences. These are now global level responsibilities. At first sight this appears to be a problem restricted to big science, technology, and engineering alone in terms of finding more acceptable forms of energy production, as a counter to our current dependence on fossil fuels and that it might not be an area where system safety can play a prominent part. However, this is not the case, and this paper explores the system safety application possibilities, because all new developments require to be implemented in a safe manner.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130091092","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 1
Delta Variant 三角洲变体
Pub Date : 2022-10-04 DOI: 10.56094/jss.v57i3.204
R. Zito
Nothing is harder than to realize when you are living through history. For most of us, each day is pretty much like another. There is nothing historically remarkable about that. Occasionally, however, our lives are punctuated by events, both natural and man-made, that are apocalyptic and often (but not always) beyond our control – natural disasters, war, pestilence, and famine. These are the events that the historian must recognize. At this time, it is the COVID-19 pandemic that demands to be recorded by “his-story” so that posterity will know what we did right, and what we did wrong. This author has taken up the challenge of producing accurate, unbiased, comprehensive, technical annals of the global coronavirus pandemic that began in 2019. “The Delta Variant” is the third publication in this series. We are now near the end of the third year of the pandemic (summer/fall 2021). As predicted by this author, it has been a draconian year. Last year’s peak in the number of active cases was not a global maximum for the pandemic in the U.S., since this year the number of active cases has already surpassed it. Without knowing where the global maximum lies, no accurate predictions can be made about the magnitude and duration of this modern plague. The “Delta Variant” (δ-variant) of COVID-19 has greatly complicated efforts to combat the virus. The “anti-vaxxer” movement, uncontrolled migration of people into and within the U.S, and the relaxation of safety measures during the late spring and early summer in the U.S. also contributed difficulties. All of these problems were foreseen by the author and were discussed in the second paper (“Vaccine Safety”) of this series on the COVID pandemic. However, our biggest problem in the U.S. was an over confidence born of a natural summertime trough in the daily infection rate. We wanted to believe the infection was past, so we ignored the experience of India, and our administrators fueled our hopes with their words and actions. We believed because we wanted to believe – except for this author. So, what went wrong? What is a δ-variant, and why is it so dangerous? That will be the topic of this publication.
当你生活在历史中,没有什么比意识到这一点更困难的了。对我们大多数人来说,每一天都大同小异。这在历史上没有什么值得注意的。然而,我们的生活偶尔会被一些天灾人祸所打断,这些天灾人祸往往(但并非总是)超出我们的控制——自然灾害、战争、瘟疫和饥荒。这些都是历史学家必须认识到的事件。此时此刻,COVID-19大流行需要记录在“他的故事”中,以便子孙后代知道我们做对了什么,做错了什么。本文作者接受了挑战,为2019年开始的全球冠状病毒大流行撰写准确、公正、全面、技术的年鉴。“Delta变体”是本系列的第三本出版物。我们现在已接近大流行第三年(2021年夏/秋)的尾声。正如作者所预测的那样,今年是严酷的一年。在美国,去年的活跃病例数高峰并不是全球最高值,因为今年的活跃病例数已经超过了它。如果不知道全球最大值在哪里,就无法准确预测这场现代瘟疫的规模和持续时间。COVID-19的“δ变体”(δ变体)使抗击该病毒的努力大大复杂化。“反疫苗运动”、不受控制的移民进入美国和进入美国、美国春末夏初安全措施的放松也造成了困难。所有这些问题都是作者预见到的,并在本系列关于COVID大流行的第二篇论文(“疫苗安全”)中进行了讨论。然而,我们在美国面临的最大问题是,由于夏季日感染率的自然低谷而产生的过度自信。我们想要相信感染已经过去了,所以我们忽略了印度的经历,我们的管理人员用他们的言行点燃了我们的希望。我们相信是因为我们想要相信——除了这位作者。那么,哪里出了问题?什么是δ变量,为什么它如此危险?这将是本出版物的主题。
{"title":"Delta Variant","authors":"R. Zito","doi":"10.56094/jss.v57i3.204","DOIUrl":"https://doi.org/10.56094/jss.v57i3.204","url":null,"abstract":"Nothing is harder than to realize when you are living through history. For most of us, each day is pretty much like another. There is nothing historically remarkable about that. Occasionally, however, our lives are punctuated by events, both natural and man-made, that are apocalyptic and often (but not always) beyond our control – natural disasters, war, pestilence, and famine. These are the events that the historian must recognize. At this time, it is the COVID-19 pandemic that demands to be recorded by “his-story” so that posterity will know what we did right, and what we did wrong. This author has taken up the challenge of producing accurate, unbiased, comprehensive, technical annals of the global coronavirus pandemic that began in 2019. “The Delta Variant” is the third publication in this series. We are now near the end of the third year of the pandemic (summer/fall 2021). As predicted by this author, it has been a draconian year. Last year’s peak in the number of active cases was not a global maximum for the pandemic in the U.S., since this year the number of active cases has already surpassed it. Without knowing where the global maximum lies, no accurate predictions can be made about the magnitude and duration of this modern plague. The “Delta Variant” (δ-variant) of COVID-19 has greatly complicated efforts to combat the virus. The “anti-vaxxer” movement, uncontrolled migration of people into and within the U.S, and the relaxation of safety measures during the late spring and early summer in the U.S. also contributed difficulties. All of these problems were foreseen by the author and were discussed in the second paper (“Vaccine Safety”) of this series on the COVID pandemic. However, our biggest problem in the U.S. was an over confidence born of a natural summertime trough in the daily infection rate. We wanted to believe the infection was past, so we ignored the experience of India, and our administrators fueled our hopes with their words and actions. We believed because we wanted to believe – except for this author. So, what went wrong? What is a δ-variant, and why is it so dangerous? That will be the topic of this publication.","PeriodicalId":250838,"journal":{"name":"Journal of System Safety","volume":"70 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-10-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116975156","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 16
期刊
Journal of System Safety
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1