Interlocking safety cases for unmanned autonomous systems in urban environments
Interlocking safety cases for unmanned autonomous systems in urban environments
复制标题
城市环境中无人自主系统的连锁安全案例
DOI：
10.1145/3183440.3195035
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Cleland-Huang, Jane
中科院分区：
文献类型：
--
作者：
Vierhauser, Michael;Bayley, Sean;Wyngaard, Jane;Cheng, Jinghui;Xiong, Wandi;Lutz, Robyn;Huseman, Joshua;Cleland-Huang, Jane
小型无人机系统(SUA)越来越多地被用于电子商务、空中监视和环境监测等任务，这导致在日益混乱的空域中需要新的安全机制。安全保证案例(SAC)为众多安全关键领域的系统和软件安全推理提供了最先进的解决方案。基于连锁安全案例的思想，我们提出了一种新的方法。SUAS基础设施安全案例(ISAC)规定了假设，并对进入空域的SUA的行为施加限制。然后，每个SUA通过提交自己的(部分)安全案例(USAC)来证明其符合ISAC的要求，USAC通过一组联锁点连接到ISAC。为了强制执行“信任但验证”策略，在空域中的SUAS符合性在运行时被监控，并且其行为使用基于ISAC对其行为的期望的信誉模型来描述。
The growing adoption of small unmanned aircraft systems (sUAS) for tasks such as eCommerce, aerial surveillance, and environmental monitoring introduces the need for new safety mechanisms in an increasingly cluttered airspace. Safety assurance cases (SAC) provide a state-of-the-art solution for reasoning about system and software safety in numerous safety-critical domains. We propose a novel approach based on the idea of interlocking safety cases. The sUAS infrastructure safety case (iSAC) specifies assumptions and applies constraints upon the behavior of sUAS entering the airspace. Each sUAS then demonstrates compliance to the iSAC by presenting its own (partial) safety case (uSAC) which connects to the iSAC through a set of interlock points. To enforce a "trust but verify" policy, sUAS conformance is monitored at runtime while it is in the airspace and its behavior is described using a reputation model based on the iSAC's expectations of its behavior.