Safety Analysis of Systems-of-Systems

Safety-critical systems may fail dangerously with severe consequences to the health of the involved humans, costly equipment, the environment, or other valuable assets of a stakeholder. For these classes of systems, the developers are obliged to analyze each potentially hazardous situation thoroughly. In addition, any identified hazardous situation needs to be considered for risk reduction measures, including adjustments of the system's design, additional safeguards if the hazards cannot entirely be removed by design, or warning information to users.An essential activity in the development process is the safety analysis, where hazards related to the system under development are identified, and the risks are evaluated and classified. This classification stipulates the rigor of complying with safety standard requirements and directing the development and verification activities. Several techniques for safety analysis have been identified in the literature and are applied in industrial development processes.The technical evolution enables moving from developing single systems with specific features towards attaching several independent systems to a system-of-systems.On top of the trend towards connectedness, there is also a trend towards more and more automation. In the vehicle domain, autonomous vehicles can collaborate to achieve specific goals, like transporting goods in warehouses, transporting containers in automated ports, or transporting material in off-road environments.Autonomy brings in new challenges when ensuring product safety and functional safety for single systems due to the lack of a human operator as a fallback solution.Further, when autonomous vehicles collaborate in a fleet, the safety analysis becomes more complex since their interaction and interoperability bring forth new hazards not identifiable with a safety analysis of a single system. Our research aims to bridge this gap and provide solutions for specifying a system-of-systems and finding and developing suitable safety analysis methods.To understand the challenges and current practices, we have studied industrial projects where systems-of-systems are developed. We have applied safety analysis methods to our industrial cases and found limitations of finding hazards related to a system-of-systems. As part of our research, we have developed extensions to the safety analysis methods to support the analysis of a system-of-systems. We have developed the Safe System-of-Systems (SafeSoS) method which is a structured and hierarchical process to discover and document a system-of-systems characteristics on three primary abstraction levels. Additionally, we utilize model-based formalism to describe the System-of-Systems’ characteristics on each level. Our research results support engineers in the industry when designing a safety-critical system-of-systems.Abstract [sv] Safety-critical systems may fail dangerously with severe consequences to the health of the involved humans, costly equipment, the environment, or other valuable assets of a stakeholder. For these classes of systems, the developers are obliged to analyze each potentially hazardous situation thoroughly. In addition, any identified hazardous situation needs to be considered for risk reduction measures, including adjustments of the system's design, additional safeguards if the hazards cannot entirely be removed by design, or warning information to users. An essential activity in the development process is the safety analysis, where hazards related to the system under development are identified, and the risks are evaluated and classified. This classification stipulates the rigor of complying with safety standard requirements and directing the development and verification activities. Several techniques for safety analysis have been identified in the literature and are applied in industrial development processes.The technical evolution enables moving from developing single systems with specific features towards attaching several independent systems to a system-of-systems.On top of the trend towards connectedness, there is also a trend towards more and more automation. In the vehicle domain, autonomous vehicles can collaborate to achieve specific goals, like transporting goods in warehouses, transporting containers in automated ports, or transporting material in off-road environments.Autonomy brings in new challenges when ensuring product safety and functional safety for single systems due to the lack of a human operator as a fallback solution.Further, when autonomous vehicles collaborate in a fleet, the safety analysis becomes more complex since their interaction and interoperability bring forth new hazards not identifiable with a safety analysis of a single system. Our research aims to bridge this gap and provide solutions for specifying a system-of-systems and finding and developing suitable safety analysis methods.To understand the challenges and current practices, we have studied industrial projects where systems-of-systems are developed. We have applied safety analysis methods to our industrial cases and found limitations of finding hazards related to a system-of-systems. As part of our research, we have developed extensions to the safety analysis methods to support the analysis of a system-of-systems. We have developed the Safe System-of-Systems (SafeSoS) method which is a structured and hierarchical process to discover and document a system-of-systems characteristics on three primary abstraction levels. Additionally, we utilize model-based formalism to describe the System-of-Systems’ characteristics on each level. Our research results support engineers in the industry when designing a safety-critical system-of-systems.