An Automated Failure Mode and Effect Analysis Based on High-Level Design Specification with Behavior Trees
- Cite this paper as:
- Grunske L., Lindsay P., Yatapanage N., Winter K. (2005) An Automated Failure Mode and Effect Analysis Based on High-Level Design Specification with Behavior Trees. In: Romijn J., Smith G., van de Pol J. (eds) Integrated Formal Methods. IFM 2005. Lecture Notes in Computer Science, vol 3771. Springer, Berlin, Heidelberg
Formal methods have significant benefits for developing safety critical systems, in that they allow for correctness proofs, model checking safety and liveness properties, deadlock checking, etc. However, formal methods do not scale very well and demand specialist skills, when developing real-world systems. For these reasons, development and analysis of large-scale safety critical systems will require effective integration of formal and informal methods. In this paper, we use such an integrative approach to automate Failure Modes and Effects Analysis (FMEA), a widely used system safety analysis technique, using a high-level graphical modelling notation (Behavior Trees) and model checking. We inject component failure modes into the Behavior Trees and translate the resulting Behavior Trees to SAL code. This enables us to model check if the system in the presence of these faults satisfies its safety properties, specified by temporal logic formulas. The benefit of this process is tool support that automates the tedious and error-prone aspects of FMEA.
KeywordsAutomated Hazard Analysis FMEA High-Level Design Specification Model Checking Behavior Trees SAL
Unable to display preview. Download preview PDF.