Now showing 1 - 10 of 16
  • Publication
    Open Dependability Exchange Metamodel: A Format to Exchange Safety Information
    Safety-relevant systems are becoming ever more complex, and they typically contain components from different manufacturers which have been integrated along the supply chain. Safety assurance is highly challenging in this context, with model-based approaches being a potential remedy. To unlock the potential of such approaches, a data format is needed to represent the safety information in multi-tier supply chains in a tool-independent way. This paper presents the Open Dependability Exchange (ODE) (https://github.com/Digital-Dependability-Identities/ODE) metamodel developed in the H2020 DEIS Project, which captures the essence and relation between the safety-related artifacts created during the entire development lifecycle. The different parts of the ODE provide coverage for architectural modeling, hazard and risk analysis, failure logic modeling (such as FME(D)A, FTA, and Markov Chains), and safety requirements. It enables the exchange of safety information between the different phases of the safety engineering lifecycle and the exchange across organizations in multi-tier supply chains. Moreover, the ODE enables the creation, integration, and validation of safety information using different vendors' tools regardless of the specific tool's methodology.
  • Publication
    Towards safety-awareness and dynamic safety management
    Future safety-critical systems will be highly automated or even autonomous and they will dynamically cooperate with other systems as part of a comprehensive ecosystem. This together with increasing utilization of artificial intelligence introduces uncertainties on different levels, which detriment the application of established safety engineering methods and standards. These uncertainties might be tackled by making systems safety-aware and enabling them to manage themselves accordingly. This paper introduces a corresponding conceptual dynamic safety management framework incorporating monitoring facilities and runtime safety-models to create safety-awareness. Based on this, planning and execution of safe system optimizations can be carried out by means of self-adaptation. We illustrate our approach by applying it for the dynamic safety assurance of a single car.
  • Publication
    DEIS: Dependability Engineering Innovation for Industrial CPS
    ( 2018)
    Armengaud, Eric
    ;
    Macher, Georg
    ;
    Massoner, Alexander
    ;
    Frager, Sebastian
    ;
    ; ;
    Longo, Simone
    ;
    Melis, Massimiliano
    ;
    Groppo, Riccardo
    ;
    Villa, Federica
    ;
    O'Leary, Padraig
    ;
    Bambury, Kevin
    ;
    Finnegan, Anita
    ;
    Zeller, Marc
    ;
    Höfig, Kai
    ;
    Papadopoulos, Yiannis
    ;
    Hawkins, Richard
    ;
    Kelly, Tim
    The open and cooperative nature of Cyber-Physical Systems (CPS) poses new challenges in assuring dependability. The DEIS project (Dependability Engineering Innovation for automotive CPS. This project has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No 732242, see http://www.deis-project.eu addresses these challenges by developing technologies that form a science of dependable system integration. In the core of these technologies lies the concept of a Digital Dependability Identity (DDI) of a component or system. DDIs are modular, composable, and executable in the field facilitating (a) efficient synthesis of component and system dependability information over the supply chain and (b) effective evaluation of this information in-the-field for safe and secure composition of highly distributed and autonomous CPS. The paper outlines the DDI concept and opportunities for application in four industrial use cases.
  • Publication
    A Context-Aware, Confidence-Disclosing and Fail-Operational Dynamic Risk Assessment Architecture
    Future automotive systems will be highly automated and they will cooperate to optimize important system qualities and performance. Established safety assurance approaches and standards have been designed with manually controlled stand-alone systems in mind and are thus not fit to ensure safety of this next generation of systems. We argue that, given frequent dynamic changes and unknown contexts, systems need to be enabled to dynamically assess and manage their risks. In doing so, systems become resilient from a safety perspective, i.e. they are able to maintain a state of acceptable risk even when facing changes. This work presents a Dynamic Risk Assessment architecture that implements the concepts of context-awareness, confidence-disclosure and fail-operational. In particular, we demonstrate the utilization of these concepts for the calculation of automotive collision risk metrics, which are at the heart of our architecture.
  • Publication
    A conceptual safety supervisor definition and evaluation framework for autonomous systems
    The verification and validation (V&V) of autonomous systems is a complex and difficult task, especially when artificial intelligence is used to achieve autonomy. However, without proper V&V, sufficient evidence to argue safety is not attainable. We propose in this work the use of a Safety Supervisor (SSV) to circumvent this issue. However, the design of an adequate SSV is a challenge in itself. To assist in this task, we present a conceptual framework and a corresponding metamodel, which are motivated and justified by existing work in the field. The conceptual framework supports the alignment of future research in the field of runtime safety monitoring. Our vision is for the different parts of the framework to be filled with exchangeable solutions so that a concrete SSV can be derived systematically and efficiently, and that new solutions can be embedded in it and get evaluated against existing approaches. To exemplify our vision, we present an SSV that is based on the ISO 22839 standard for forward collision mitigation.
  • Publication
    The EMC2 project on embedded microcontrollers: Technical progress after two years
    ( 2016)
    Weber, Werner
    ;
    Hoess, Alfred
    ;
    Deventer, Jan van
    ;
    Oppenheimer, Frank
    ;
    Ernst, Rolf
    ;
    Kostrzewa, Adam
    ;
    Doré, Philippe
    ;
    Goubier, Thierry
    ;
    Isakovic, Haris
    ;
    Druml, Norbert
    ;
    Wuchner, Egon
    ;
    ;
    Schoitsch, Erwin
    ;
    Armengaud, Eric
    ;
    Soederqvist, Thomas
    ;
    Traversone, Massimo
    ;
    Uhrig, Sascha
    ;
    Pérez-Cortés, Juan Carlos
    ;
    Saez, Sergio
    ;
    Kuusela, Juha
    ;
    Helvoort, Mark van
    ;
    Cai, Xing
    ;
    Nordmoen, Björn
    ;
    Paulsen, Geir Yngve
    ;
    Dahle, Hans Petter
    ;
    Geissel, Michael
    ;
    Salecker, Jürgen
    ;
    Tummeltshammer, Peter
    Since April 2014 the Artemis/ECSEL project EMC2 is running and provides significant results. EMC2 stands for "Embedded Multi-Core Systems for Mixed Criticality Applications in Dynamic and Changeable Real-Time Environments". In this paper we report recent progress on technical work in the different workpackages and use cases. We highlight progress in the research on system architecture, design methodology, platform and operating systems, and in qualification and certification. Application cases in the fields of automotive, avionics, health care, and industry are presented exploiting the technical results achieved.
  • Publication
    Multidirectional modular conditional safety certificates
    ( 2015)
    Amorim, Tiago Luiz Buarque de
    ;
    Ruiz, Alejandra
    ;
    Dropmann, Christoph
    ;
    Over the last 20 years, embedded systems have evolved from closed, rather static single-application systems towards open, flexible, multi-application systems of systems. While this is a blessing from an application perspective, it certainly is a curse from a safety engineering perspective as it invalidates the base assumptions of established engineering methodologies. Due to the combinatorial complexity and the amount of uncertainty encountered in the analysis of such systems, we believe that more potent modular safety approaches coupled with adequate runtime checks are required. In this paper, we investigate the possibility of an integrated contract-based approach covering vertical dependencies (between platform and application) and horizontal dependencies (between applications) in order to efficiently assure the safety of the whole system of systems through modularization. We integrate both concepts using state-of-the-art research and showcase the application of the integrated approach based on a small industrial case study.
  • Publication
    WAP: Digital dependability identities
    ( 2015) ; ;
    Papadopoulos, Yiannis
    ;
    Armengaud, Eric
    ;
    Zeller, Marc
    ;
    Höfig, Kai
    Cyber-Physical Systems (CPS) provide enormous potential for innovation but a precondition for this is that the issue of dependability has been addressed. This paper presents the concept of a Digital Dependability Identity (DDI) of a component or system as foundation for assuring the dependability of CPS. A DDI is an analyzable and potentially executable model of information about the dependability of a component or system. We argue that DDIs must fulfill a number of properties including being universally useful across supply chains, enabling off-line certification of systems where possible, and providing capabilities for in-field certification of safety of CPS. In this paper, we focus on system safety as one integral part of dependability and as a practical demonstration of the concept, we present an initial implementation of DDIs in the form of Conditional Safety Certificates (also known as ConSerts). We explain ConSerts and their practical operationalization based on an illustrative example.
  • Publication
    Towards trust assurance and certification in cyber-physical systems
    ( 2014) ;
    Armengaud, Eric
    ;
    Schoitsch, Erwin
    We are currently witnessing a 3rd industrial revolution, driven by ever more interconnected distributed systems of systems, running under the umbrella term of cyber-physical systems (CPS). In the context of this paradigm, different types of computer-based systems from different application domains collaborate with each other in order to render higher level services that could not be rendered by single systems alone. However, the tremendous potential of CPS is inhibited due to significant engineering challenges with respect to the systems safety and security. Traditional methodologies are not applicable to CPS without further ado and new solutions are therefore required. In this paper, we present potential solution ideas that are currently investigated by the European EMC² research project.
  • Publication
    A safety engineering framework for open adaptive systems
    In recent years it has become more and more evident that openness and adaptivity are key characteristics of next generation distributed systems. The reason for that is not least the advent of computing trends like Ubiquitous Computing, Ambient Intelligence, and Cyber Physical Systems, where systems are usually open for dynamic integration and able to react adaptively to changing situations. Despite being open and adaptive it is a common requirement for such systems to be safe. However, traditional safety assurance techniques, both state-of-the-practice and state-of-the-art, are not sufficient in this context. We recently developed some initial solution concepts based on conditional safety certificates and corresponding runtime analyses. In this paper we show how to operationalize these concepts. To this end we present in detail how to specify conditional safety certificates, how to transform them into suitable runtime models, and how these models finally support dynamic safetyevaluations.