1. Automated study of failures Master Thesis. Cooperation between DoCS/ASTEC (Parosh A. Abdulla) And Prover Technology/ESACS (Ove Åkerlund)

2. ESACS Enhanced Safety Assessment for Complex Systems Members are from the aircraft industry … … and companies involved in formal methods (ex: Prover Technology)

3. Traditional development cycle Informal specification Implementation Tests

4. Safer development cycle Informal specification Implementation (model) Automated verification Formal specification

5. Failures Failures (i.e. hardware failures) are usually not taken into account Techniques exist: FTA (Fault Tree Analysis) Fault trees are still generated by hand Fault trees of system using software can be very large

6. FTA: Faults ignored Lamp Switch_on Light_emitted

7. FTA: addition of identified faults Lamp Switch_on Button Power_fail Bulb_fail Button_off_fail

8. FTA: Model with faults Lamp Switch_on Button Power_fail Bulb_fail Button_off_fail & Light_emitted 11

9. FTA: The tree Switch_on AND not Light_emitted 11 Power_failBulb_fail

10. FTA: The tree Not Switch_on AND Light_emitted & Not Power_failNot Bulb_failButton_off_fail

11. Difficulties Qualitative analysis –Find Minimum Prime Implicants –Problem is NP-Complete Quantitative analysis –Given probabilities of occurrence of basic failures, –Find the probabilities of occurrence of top events

12. Qualitative Analysis Prime Implicant –Assignment of values to variables –The restriction of a Boolean function by a Prime Implicant is always true –They represent ”causes” of top events –Can be used to speed up the quantitative analysis