Modeling and analysis of high consequence, high assurance systems requires special modeling considerations. System safety and reliability information must be captured in the models. Previously, high consequence systems were modeled using separate, disjoint models for safety, reliability, and security. The MultiGraph Architecture facilitates the implementation of a model-integrated system for mo...

Many systems can be modelled as a mission made up of a sequence of discrete phases. Each phase has a different requirement for successful completion and mission failure will result if any phase is unsuccessful. Fault tree analysis and Markov techniques have been used previously to model this type of system for non-repairable and repairable systems respectively. Cause-consequence analysis is an ...

The most-widely used approach to explosion consequence analysis is the classical engineering method based on the combination of TNT equivalence, scaled distances and overpressure-based damage levels. This approach rests on established and easily comprehensible elements and permits a fast assessment of explosion consequences. There are however several limitations inherent in this approach. In co...

There are various contexts in which it is not pertinent to generate and attend to all the classical consequences of a given premiss — or to trace all the premisses which classically entail a given consequence. Such contexts may involve limited resources of an agent or inferential engine, contextual relevance or irrelevance of certain consequences or premisses, modelling everyday human reasoning...

My paper discusses system consequence, which is a central idea in the project to lift the theory of information flow to the general level of universal logic and the theory of institutions. At the same time, it uses ideas from information flow to extend the theory of institutions. ICCS 2009, 26–31 July 2009 System Consequence Table of

Introduction Whenever one asserts a claim of any kind, one engages in a commitment not just to that claim itself, but to a variety of other claims that follow in its wake, claims that, as we tend to say, follow logically from the original claim. To say that Smith and Jones are both great basketball players is to say something from which it follows that Smith is a great basketball player, that s...

The aim of this note is rst to set up some general theory for discussing diierent aspects of the notion of a logic and then to draw attention to the schematic aspects of logic and suggest a way of capturing this aspect without making any commitment to the kind of syntax a logic should have.

The proof of correctness and completeness of a logical calculus w.r.t. a given semantics can be read as telling us that the tautologies (or, more generally, the relation of consequence) specified in a model-theoretic way can be equally well specified in a proof-theoretic way, by means of the calculus (as the theorems, resp. the relation of inferability of the calculus). Thus we know that both f...