Enhancing Software Safety by Fault Trees: Experiences from an Application to Flight Critical SW
Enhancing Software Safety by Fault Trees: Experiences from an Application to Flight Critical SW
复制标题
通过故障树增强软件安全：从应用程序到飞行关键软件的经验
DOI：
10.1007/978-3-540-39878-3_23
复制
发表时间：
2003
期刊：
影响因子：
--
通讯作者：
M. Bachmayer
中科院分区：
文献类型：
--
作者：
W. Weber;Heidemarie Tondok;M. Bachmayer
故障树分析是系统安全性和可靠性评估中成熟的方法。我们将该技术的原理转移到汇编代码分析中，将软件的任何不正确输出视为不需要的顶级事件。从提供输出的指令开始并追溯到对这些输出做出贡献的所有指令，生成了可以图形地表示为故障树的分层参考系统。为了应对代码中的大量关系，开发了一个工具套件，它可以自动创建这些引用并检查未满足的指令先决条件。该工具应用于惯性测量单元的操作软件，为飞机的人工稳定提供安全关键信号。介绍了该方法及其作为软件工具的实现，并讨论了我们所经历的好处、令人惊讶的结果和局限性。
The fault tree analysis is a well established method in system safety and reliability assessment. We transferred the principles of this technique to an assembler code analysis, regarding any incorrect output of the software as the undesired top-level event. Starting from the instructions providing the outputs and tracing back to all instructions contributing to these outputs a hierarchical system of references is generated that may graphically be represented as a fault tree. To cope with the large number of relations in the code, a tool suite has been developed, which automatically creates these references and checks for unfulfilled preconditions of instructions. The tool was applied to the operational software of an inertial measurement unit, which provides safety critical signals for artificial stabilization of an aircraft. The method and its implementation as a software tool is presented and the benefits, surprising results, and limitations we have experienced are discussed.