Safety-critical system's failure or malfunction can cause loss of human lives or damage to the physical environment; therefore, continuous safety assessment is crucial for such systems. In many domains this includes the use of Safety assurance cases (SACs) as a structured argument that the system is safe for use. SACs can be challenging to maintain during system evolution due to the disconnect between the safety analysis and system development process. Further, safety analysts often lack domain knowledge and tool support to evaluate the SAC. We propose a solution that leverages software traceability to connect relevant system artifacts to safety analysis models, and then uses these connections to visualize the change. We elicit design rationales for system changes to help safety stakeholders analyze the impact of system changes on safety. We present new traceability techniques for closer integration of the safety analysis and system development process, and illustrate the viability of our approach using examples from a cyber-physical system that deploys Unmanned Aerial Vehicles for emergency response.
翻译:安全关键系统的故障或失效可能导致人员伤亡或物理环境破坏,因此对此类系统进行持续安全评估至关重要。在许多领域,这包括使用安全保障案例作为结构化论证,证明系统可以安全运行。由于安全分析与系统开发过程之间的脱节,保障案例在系统演进过程中可能难以维护。此外,安全分析人员通常缺乏领域知识和工具支持来评估保障案例。我们提出了一种解决方案,利用软件可追溯性将相关系统工件与安全分析模型相连接,并通过这些连接可视化变更。我们为系统变更的设计原理进行引导,以帮助安全相关方分析系统变更对安全性的影响。我们提出新的可追溯性技术,用于更紧密地整合安全分析与系统开发过程,并通过一个部署无人机用于应急响应的信息物理系统的示例,展示了我们方法的可行性。