Self-adaptive systems are able to change their behaviour at run-time in response to changes. Self-adaptation is an important strategy for managing uncertainty that is present during the design of modern systems, such as autonomous vehicles. However, assuring the safety of self-adaptive systems remains a challenge, particularly when the adaptations have an impact on safety-critical functions. The field of safety engineering has established practices for analyzing the safety of systems. System Theoretic Process and Analysis (STPA) is a hazard analysis method that is well-suited for self-adaptive systems. This paper describes a design-time extension of STPA for self-adaptive systems. Then, it derives a reference model and analysis obligations to support the STPA activities. The method is applied to three self-adaptive systems described in the literature. The results demonstrate that STPA, when used in the manner described, is an applicable hazard analysis method for safety-critical self-adaptive systems.
翻译:自适应系统能够在运行时根据变化改变其行为。自适应性是管理现代系统(例如自动驾驶汽车)中存在的不确定性的重要策略。然而,确保自适应系统的安全性仍然是一个挑战,特别是当适应会对关键安全功能产生影响时。安全工程领域已经建立了分析系统安全性的实践。系统过程论分析 (STPA) 是一种适用于自适应系统的危险分析方法。本文描述了一个用于自适应系统的 STPA 的设计时扩展。然后,它推导出一个参考模型和分析义务来支持 STPA 活动。该方法应用于文献中描述的三个自适应系统。结果表明,使用 STPA 的方式是一种适用于关键安全性自适应系统的危险分析方法。