Introduction ITV Model-based Analysis and Design of Embedded Software Techniques and methods for Critical Software Anders P. Ravn Aalborg University August 2011

Safety Critical Systems Airbus 380 control system Airbus 380 infotainment system High speed train control system Cruise control in a car Anaestetics monitoring equipment Electronic door lock Net banking application Playground entertainment system

Software A component of a system - not in itself critical. may monitor or control other components - in a safety-critical system. Thus we must have assurance that it satisfies the requirements (is correct).

Certification Standardized Assurance done by independent assessors. Mandatory for products in some markets; useful for all products to have followed guidelines in case of conflicts. Good Manufacturing Practices (GMP).

Learning Goals Safety Integrity Levels (SIL) as described in the standard IEC The required processes for SIL level projects Recommended documentation for SIL level projects Safety assessment with Fault Trees Dependability, Fault Tolerance and Mechanisms for Fault Tolerance