Premium
Experience with fault injection experiments for FMEA
Author(s) -
Grunske Lars,
Winter Kirsten,
Yatapanage Nisansala,
Zafar Saad,
Lindsay Peter A.
Publication year - 2011
Publication title -
software: practice and experience
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.437
H-Index - 70
eISSN - 1097-024X
pISSN - 0038-0644
DOI - 10.1002/spe.1039
Subject(s) - failure mode and effects analysis , reliability engineering , component (thermodynamics) , computer science , process (computing) , hazard , fault tree analysis , hazard analysis , fault (geology) , risk analysis (engineering) , engineering , programming language , chemistry , physics , organic chemistry , seismology , thermodynamics , geology , medicine
Failure Modes and Effects Analysis (FMEA) is a widely used system and software safety analysis technique that systematically identifies failure modes of system components and explores whether these failure modes might lead to potential hazards. In practice, FMEA is typically a labor‐intensive team‐based exercise, with little tool support. This article presents our experience with automating parts of the FMEA process, using a model checker to automate the search for system‐level consequences of component failures. The idea is to inject runtime faults into a model based on the system specification and check if the resulting model violates safety requirements, specified as temporal logical formulas. This enables the safety engineer to identify if a component failure, or combination of multiple failures, can lead to a specified hazard condition. If so, the model checker produces an example of the events leading up to the hazard occurrence which the analyst can use to identify the relevant failure propagation pathways and co‐effectors. The process is applied on three medium‐sized case studies modeled with Behavior Trees. Performance metrics for SAL model checking are presented. Copyright © 2011 John Wiley & Sons, Ltd.