Incremental Safety Assessment: Theory and Practice
Incremental Safety Assessment: Theory and Practice
复制标题
增量安全评估：理论与实践
DOI：
--
复制
发表时间：
2008
期刊：
影响因子：
--
通讯作者：
T. Kelly
中科院分区：
文献类型：
--
作者：
O. Lisagor;T. Kelly
学术界、工业界和标准化组织早就认识到，从设计的最早概念阶段开始进行迭代安全评估的必要性。由于预算和时间的限制，这样的过程很少涉及在每次迭代中对系统进行完全的重新评估。相反，迭代评估应该逐步建立起来，尽可能地重用以前迭代的结果，并允许工程师专注于迭代之间的更改。因此，跟踪和管理迭代之间的更改的框架是增量安全评估的一个关键方面。本文探讨了在评估迭代之间可能发生的更改类型。我们首先说明一个天真的观点，该观点假设每个评估迭代只能添加新的知识。然而，对真实项目的评估除了增加在以前迭代中获得的知识外，还可能挑战这些知识。为了自信地对设计的充分性作出决定，分析员和工程师将被要求考虑项目日益增长的设计知识对不断发展的安全评估提出挑战的性质和程度。
The need for iterative safety assessment that starts at the earliest – conceptual – stages of the design has been long recognised by academia, industry and standardisation groups. Due to budgetary and time constraints such a process can rarely involve complete reassessment of the system at each iteration. Instead iterative assessment should build-up gradually, reutilising results of previous iterations wherever possible, and allowing engineers to focus on changes between iterations. A framework for tracking and managing changes between iterations is therefore a key aspect of incremental safety assessment. This paper explores the types of change that can occur between assessment iterations. We first illustrate a naïve view that assumes that each assessment iteration can only add new knowledge. However, assessment on a real project is likely to challenge, in addition to adding to, knowledge gained at previous iterations. In order to confidently make decisions about the adequacy of design, analysts and engineers will be required to consider the nature and extent to which the increasing design knowledge available on a project challenges the evolving safety assessment.