For large systems, the manual construction of fault trees is error-prone, encouraging automated techniques.In this paper we show how the retrenchment approach to formal system model evolution can be developed into a versatile structured approach for the mechanical construction of fault trees. The system structure and the structure of retrenchment concessions interact to generate fault trees with appropriately deep nesting. The same interactions fuel a structural approach to hierarchical fault trees, allowing a system and its faults to be viewed at multiple levels of abstraction.We show how this approach can be extended to deal with minimisation, thereby diminishing the post-hoc subsumption workload and potentially rendering some infeasible cases feasible.The techniques we describe readily generalise to encompass timing, allowing glitches and other transient errors to be properly described.Lastly, a mild generalisation to cope with cyclic system descriptions allows the timed theory to encompass systems with feedback.

Retrenchment, and the Generation of Fault Trees for Static, Dynamic and Cyclic Systems

Bozzano, Marco
2006

Abstract

For large systems, the manual construction of fault trees is error-prone, encouraging automated techniques.In this paper we show how the retrenchment approach to formal system model evolution can be developed into a versatile structured approach for the mechanical construction of fault trees. The system structure and the structure of retrenchment concessions interact to generate fault trees with appropriately deep nesting. The same interactions fuel a structural approach to hierarchical fault trees, allowing a system and its faults to be viewed at multiple levels of abstraction.We show how this approach can be extended to deal with minimisation, thereby diminishing the post-hoc subsumption workload and potentially rendering some infeasible cases feasible.The techniques we describe readily generalise to encompass timing, allowing glitches and other transient errors to be properly described.Lastly, a mild generalisation to cope with cyclic system descriptions allows the timed theory to encompass systems with feedback.
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11582/2785
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
social impact