A new safety-guided design methodology to complement model-based safety analysis for safety assurance

With the rapid advancement of Formal Methods, Model-based Safety Analysis (MBSA) has been gaining tremendous attention for its ability to rigorously verify whether safety-critical scenarios are adequately addressed by design solution a cyber-physical human system. However, there is gap. If specific not included in given (i.e., model) first place, results MBSA cannot be trusted safety assurance. To tackle this problem, we propose new safety-guided methodology (called STPA+) complement MBSA. Inspired STPA, STPA+ treats system as control structure, which particularly fit systems with complex interactions between human, machine, and automation. Three methods developed possible omissions caused incorrectly defined constraints, improperly constrained process model, inadequately designed controller. In way, directly derives an input verification program bridges gap current approaches