{"title":"Asil decomposition using SMT","authors":"M. Safar","doi":"10.1109/FDL.2017.8303902","DOIUrl":null,"url":null,"abstract":"The ISO 26262 defines discrete Automotive Safety Integrity Levels (ASILs) to enforce functional safety. Each component in the automotive system under development must have an associated ASIL. Higher ASIL implies more development cost and effort. ASIL decomposition allows reducing ASIL allocated to components whose joint failure is the only cause for the violation of a safety goal. Fault trees are widely used in the safety analysis process and hence in the ASIL allocation. In this paper, we present a new approach for solving the ASIL decomposition problem using Satisfiability Modulo Theories (SMT). The fault tree structure is fully represented in SMT. Compared to other approaches for ASIL decomposition; our approach eliminates the need of finding the Minimal Cut Set (MCS) of the fault tree. Moreover, it does not require assigning a numerical cost value for each ASIL. Recent emerging trend in powerful SMT solvers for solving objective functions is utilized to find the optimal ASIL decomposition.","PeriodicalId":370459,"journal":{"name":"2017 Forum on Specification and Design Languages (FDL)","volume":"90 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2017-09-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"1","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2017 Forum on Specification and Design Languages (FDL)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/FDL.2017.8303902","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 1
Abstract
The ISO 26262 defines discrete Automotive Safety Integrity Levels (ASILs) to enforce functional safety. Each component in the automotive system under development must have an associated ASIL. Higher ASIL implies more development cost and effort. ASIL decomposition allows reducing ASIL allocated to components whose joint failure is the only cause for the violation of a safety goal. Fault trees are widely used in the safety analysis process and hence in the ASIL allocation. In this paper, we present a new approach for solving the ASIL decomposition problem using Satisfiability Modulo Theories (SMT). The fault tree structure is fully represented in SMT. Compared to other approaches for ASIL decomposition; our approach eliminates the need of finding the Minimal Cut Set (MCS) of the fault tree. Moreover, it does not require assigning a numerical cost value for each ASIL. Recent emerging trend in powerful SMT solvers for solving objective functions is utilized to find the optimal ASIL decomposition.
ISO 26262定义了离散的汽车安全完整性等级(asil)来加强功能安全。正在开发的汽车系统中的每个组件都必须具有相关的ASIL。更高的ASIL意味着更多的开发成本和努力。ASIL分解允许减少分配给那些联合故障是违反安全目标的唯一原因的组件的ASIL。故障树在安全分析过程中得到了广泛的应用,因此也被广泛应用于ASIL的分配中。本文提出了一种利用可满足模理论(SMT)求解ASIL分解问题的新方法。故障树结构在SMT中得到了完整的表示。与其它ASIL分解方法相比;该方法消除了寻找故障树最小割集(MCS)的需要。此外,它不需要为每个ASIL分配一个数值成本值。利用最近出现的用于求解目标函数的强大SMT求解器的趋势来寻找最优的ASIL分解。