A key goal of the System-Theoretic Process Analysis (STPA) hazard analysis technique is the identification of loss scenarios - causal factors that could potentially lead to an accident. We propose an approach that aims to assist engineers in identifying potential loss scenarios that are associated with flawed assumptions about a system's intended operational environment. Our approach combines aspects of STPA with formal modelling and simulation. Currently, we are at a proof-of-concept stage and illustrate the approach using a case study based upon a simple car door locking system. In terms of the formal modelling, we use Extended Logic Programming (ELP) and on the simulation side, we use the CARLA simulator for autonomous driving. We make use of the problem frames approach to requirements engineering to bridge between the informal aspects of STPA and our formal modelling.
翻译:系统理论过程分析(STPA)危害分析技术的一个关键目标是识别损失场景——即可能导致事故的因果因素。我们提出了一种方法,旨在帮助工程师识别与系统预期运行环境的错误假设相关的潜在损失场景。该方法将STPA的各个方面与形式化建模及仿真相结合。目前,我们处于概念验证阶段,并通过一个基于简单车门锁系统的案例研究来展示该方法。在形式化建模方面,我们采用扩展逻辑编程(ELP);在仿真方面,我们使用用于自动驾驶的CARLA仿真器。我们利用需求工程中的问题框架方法,在STPA的非形式化方面与我们的形式化建模之间建立桥梁。