Safety Assessment Using Behavior Trees and Model Checking
Safety Assessment Using Behavior Trees and Model Checking
复制标题
使用行为树和模型检查进行安全评估
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Nisansala Yatapanage
中科院分区：
文献类型：
--
作者：
P. Lindsay;Kirsten Winter;Nisansala Yatapanage
本文演示了如何使用行为树和模型检查来评估包含大量冗余的系统的系统安全要求。该案例研究涉及空客 A320 飞机的液压系统，该系统对于飞机控制至关重要。该系统设计应该能够处理最多 3 个单独发生故障的不同组件，而不会损失所有液压动力。由于需要考虑大量的细节和大量的不同情况，验证此类设计的逻辑对人类来说很困难。本文演示了模型检查如何深入了解哪些组件故障组合可能导致系统故障。
This paper demonstrates the use of Behavior Trees and model checking to assess system safety requirements for a system containing substantial redundancy. The case study concerns the hydraulics systems for the Airbus A320 aircraft, which are critical for aircraft control. The system design is supposed to be able to handle up to 3 different components failing individually, without loss of all hydraulic power. Verifying the logic of such designs is difficult for humans because of the sheer amount of detail and number of different cases that need to be considered. The paper demonstrates how model checking can yield insights into what combinations of component failures can lead to system failure.