Safety-critical infrastructures must operate safely and reliably. Fault tree analysis is a widespread method used to assess risks in these systems: fault trees (FTs) are required - among others - by the Federal Aviation Authority, the Nuclear Regulatory Commission, in the ISO26262 standard for autonomous driving and for software development in aerospace systems. Although popular both in industry and academia, FTs lack a systematic way to formulate powerful and understandable analysis queries. In this paper, we aim to fill this gap and introduce Boolean Fault tree Logic (BFL), a logic to reason about FTs. BFL is a simple, yet expressive logic that supports easier formulation of complex scenarios and specification of FT properties. Alongside BFL, we present model checking algorithms based on binary decision diagrams (BDDs) to analyse specified properties in BFL, patterns and an algorithm to construct counterexamples. Finally, we propose a case-study application of BFL by analysing a COVID19-related FT.
翻译:安全临界基础设施必须安全可靠地运作。 断层树分析是用来评估这些系统中风险的一种广泛方法:联邦航空管理局、核管制委员会等机构需要断层树(FTs),这是自主驾驶和航空航天系统软件开发的ISO262662标准。尽管在工业和学术界都受到欢迎,但FT缺乏系统的方法来提出有力和易懂的分析查询。在本文件中,我们的目标是填补这一空白,并引入布林断层树逻辑(BUL),这是解释FT的逻辑。BFL是一个简单而清晰的逻辑,有助于更方便地拟订复杂情景和FT特性的规格。除了BFLL之外,我们还根据二进制决定图(BDDs)提出模型核对算法,以分析BFLF、模式和算法来构建反式标本。最后,我们建议通过分析与COVID19相关的FT,对BFL进行个案研究。