Sequential application of heterogeneous models for the safetyanalysis of a control system: a case study

This paper shows how heterogeneous stochastic modelling techniques of increasing modelling power can be applied to assess the safety of a digital control system. First, a Fault-Tree (FT) has been built to model the system, assuming two-state components and independent failures. Then, the FT is automatically converted into a Bayesian Network, allowing to include more modelling details and localized dependencies. Finally, in order to accommodate repair activities and perform an availability analysis, the FT is converted into a Stochastic Petri Net (SPN). Moving from a combinatorial model (the FT) to a state space based model (the SPN) increases the modelling flexibility, but incurs into the state space explosion problem. In order to alleviate the state space explosion problem, this paper resorts to the use of a particular type of high level (coloured) Petri nets called SWN. A digital control system is considered as a case study, and safety measures have been evaluated, referring to the emergent standard IEC 61508. q 2003 Elsevier Ltd. All rights reserved.