The xSAP Safety Analysis Platform

  • Benjamin Bittner
  • Marco BozzanoEmail author
  • Roberto Cavada
  • Alessandro Cimatti
  • Marco Gario
  • Alberto Griggio
  • Cristian Mattarei
  • Andrea Micheli
  • Gianni Zampedri
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 9636)


This paper describes the xSAP safety analysis platform. xSAP provides several model-based safety analysis features for finite- and infinite-state synchronous transition systems. In particular, it supports library-based definition of fault modes, an automatic model extension facility, generation of safety analysis artifacts such as Dynamic Fault Trees and Failure Mode and Effects Analysis tables. Moreover, it supports probabilistic evaluation of Fault Trees, failure propagation analysis using Timed Failure Propagation Graphs, and Common Cause Analysis. xSAP has been used in several industrial projects as verification back-end, and is currently being evaluated in a joint R&D Project involving FBK and The Boeing Company.


Model Check Fault Mode Failure Propagation Fault Tree Analysis Fault Tree Analysis 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


  1. 1.
    Joshi, A., Miller, S., Whalen, M., Heimdahl, M.: A proposal for model-based safety analysis. In: DASC. IEEE Computer Society (2005)Google Scholar
  2. 2.
    Bozzano, M., Villafiorita, A.: Design and Safety Assessment of Critical Systems. CRC Press (Taylor and Francis), an Auerbach Book, Boca Raton (2010)CrossRefGoogle Scholar
  3. 3.
    Bozzano, M., Cimatti, A., Katoen, J.P., Nguyen, V., Noll, T., Roveri, M.: Safety, dependability and performance analysis of extended AADL models. Comp. J. 54(5), 754–775 (2011)CrossRefGoogle Scholar
  4. 4.
    SAE: ARP4761 Guidelines and Methods for Conducting the Safety Assessment Process on Civil Airborne Systems and Equipment., December 1996Google Scholar
  5. 5.
    ECSS: European Cooperation on Space Standardization.
  6. 6.
    Bozzano, M., Cimatti, A., Fernandes Pires, A., Jones, D., Kimberly, G., Petri, T., Robinson, R., Tonetta, S.: Formal design and safety analysis of AIR6110 wheel brake system. In: Kroening, D., Păsăreanu, C.S. (eds.) CAV 2015. LNCS, vol. 9206, pp. 518–535. Springer, Heidelberg (2015)CrossRefGoogle Scholar
  7. 7.
    Bozzano, M., Villafiorita, A.: The FSAP/NuSMV-SA safety analysis platform. STTT 9(1), 5–24 (2007)CrossRefGoogle Scholar
  8. 8.
    Bozzano, M., Cimatti, A., Tapparo, F.: Symbolic fault tree analysis for reactive systems. In: Namjoshi, K.S., Yoneda, T., Higashino, T., Okamura, Y. (eds.) ATVA 2007. LNCS, vol. 4762, pp. 162–176. Springer, Heidelberg (2007)CrossRefGoogle Scholar
  9. 9.
    Bozzano, M., Cimatti, A., Griggio, A., Mattarei, C.: Efficient anytime techniques for model-based safety analysis. In: Kroening, D., Păsăreanu, C.S. (eds.) CAV 2015. LNCS, vol. 9206, pp. 603–621. Springer, Heidelberg (2015)CrossRefGoogle Scholar
  10. 10.
    Bozzano, M., Cimatti, A., Katoen, J.P., Katsaros, P., Mokos, K., Nguyen, V., Noll, T., Postma, B., Roveri, M.: Spacecraf early design validation using formal methods. Reliab. Eng. Syst. Saf. 132, 20–35 (2014)CrossRefGoogle Scholar
  11. 11.
    Bittner, B., Bozzano, M., Cimatti, A., de Ferluc, R., Gario, M., Guiotto, A., Yushtein, Y.: An integrated process for FDIR design in aerospace. In: IMBSA (2014)Google Scholar
  12. 12.
    Bieber, P., Castel, C., Seguin, C.: Combination of fault tree analysis and model checking for safety assessment of complex system. In: Bondavalli, A., Thévenod-Fosse, P. (eds.) EDCC 2002. LNCS, vol. 2485, pp. 19–31. Springer, Heidelberg (2002)CrossRefGoogle Scholar
  13. 13.
    Prosvirnova, T., Batteux, M., Brameret, P.A., Cherfi, A., Friedlhuber, T., Roussel, J.M., Rauzy, A.: The altarica 3.0 project for model-based safety assessment. In: DCDS (2013)Google Scholar
  14. 14.
    Bozzano, M., Cimatti, A., Lisagor, O., Mattarei, C., Mover, S., Roveri, M., Tonetta, S.: Safety assessment of altarica models via symbolic model checking. Sci. Comput. Program. 98(4), 464–483 (2015)CrossRefGoogle Scholar
  15. 15.
    Deneux, J., Åkerlund, O.: A common framework for design and safety analyses using formal methods. In: PSAM7/ESREL (2004)Google Scholar
  16. 16.
    Joshi, A., Heimdahl, M.P.E.: Model-based safety analysis of simulink models using SCADE design verifier. In: Winther, R., Gran, B.A., Dahll, G. (eds.) SAFECOMP 2005. LNCS, vol. 3688, pp. 122–135. Springer, Heidelberg (2005)CrossRefGoogle Scholar
  17. 17.
    Peikenkamp, T., Cavallo, A., Valacca, L., Böde, E., Pretzer, M., Hahn, E.M.: Towards a unified model-based safety assessment. In: Górski, J. (ed.) SAFECOMP 2006. LNCS, vol. 4166, pp. 275–288. Springer, Heidelberg (2006)CrossRefGoogle Scholar
  18. 18.
    Vesely, W., Stamatelatos, M., Dugan, J., Fragola, J., Minarick III., J., Railsback, J.: Fault Tree Handbook with Aerospace Applications, NASA, Version 1.1. August 2002.
  19. 19.
    Manian, R., Dugan, J.B., Coppit, D., Sullivan, K.J.: Combining various solution techniques for dynamic fault tree analysis of computer systems. In: HASE, pp. 21–28, IEEE (1998)Google Scholar
  20. 20.
    Bozzano, M., Cimatti, A., Gario, M., Tonetta, S.: Formal design of fault detection and identification components using temporal epistemic logic. In: Ábrahám, E., Havelund, K. (eds.) TACAS 2014 (ETAPS). LNCS, vol. 8413, pp. 326–340. Springer, Heidelberg (2014)CrossRefGoogle Scholar
  21. 21.
    Bozzano, M., Cimatti, A., Gario, M., Micheli, A.: SMT-based validation of timed failure propagation graphs. In: AAAI (2015)Google Scholar
  22. 22.
    Abdelwahed, S., Karsai, G., Mahadevan, N., Ofsthun, S.: Practical implementation of diagnosis systems using timed failure propagation graph models. IEEE Trans. Instrum. Meas. 58(2), 240–247 (2009)CrossRefGoogle Scholar
  23. 23.
    Mattarei, C., Cimatti, A., Gario, M., Tonetta, S., Rozier, K.: Comparing different functional allocations in automated air traffic control design. In: FMCAD, pp. 112–119. IEEE (2015)Google Scholar
  24. 24.
    Bozzano, M., Cimatti, A., Mattarei, C., Tonetta, S.: Formal safety assessment via contract-based design. In: Cassez, F., Raskin, J.-F. (eds.) ATVA 2014. LNCS, vol. 8837, pp. 81–97. Springer, Heidelberg (2014)Google Scholar
  25. 25.
    Bozzano, M., Cimatti, A., Mattarei, C.: Efficient analysis of reliability architectures via predicate abstraction. In: Bertacco, V., Legay, A. (eds.) HVC 2013. LNCS, vol. 8244, pp. 279–294. Springer, Heidelberg (2013)CrossRefGoogle Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2016

Authors and Affiliations

  • Benjamin Bittner
    • 1
  • Marco Bozzano
    • 1
    Email author
  • Roberto Cavada
    • 1
  • Alessandro Cimatti
    • 1
  • Marco Gario
    • 1
  • Alberto Griggio
    • 1
  • Cristian Mattarei
    • 1
  • Andrea Micheli
    • 1
  • Gianni Zampedri
    • 1
  1. 1.Fondazione Bruno KesslerTrentoItaly

Personalised recommendations