A STAMP based Method to Synthesize Controller of Safety-Critical Systems

Aeronautical systems are becoming increasingly integrated and complex. The development of these systems is critical due to the need of addressing both system requirements and safety concerns. A key component of these systems is the controller. STAMP is an accident causation model based on systems theory, which treats accidents and unacceptable losses as a dynamic control problem. In this work, we present a STAMP-based design method for synthesizing the controller logic. The control logic is generated based on the model of the system, properties related to the behavior of each non-controller components, and functional and safety system properties. Our method is original as it considers safety properties early in the development - concept of the system. Furthermore, it is based on system-level properties that allow the system designer to focus on a higher level of abstraction during design.