导弹攻击过程的STAMP/STPA任务失效及仿真研究

Missile Attack Process STAMP/STPA Mission Failure and Simulation Research

在采用传统的安全分析方法进行安全性分析时,常常关注系统的组件可靠性,很难避免由于组件交互、软件设计缺陷等引起事故的发生。STAMP把安全问题看作是控制问题,认为事故是由于控制不足导致的。文中以导弹攻击过程为例,建立导弹攻击过程的STAMP模型,采用STPA方法识别了导致导弹攻击任务失效的不安全控制行为,同时进行关键原因分析,最后对其中部分不安全控制行为进行仿真分析,为减少导弹攻击任务失效和导弹设计提供了参考。

When using traditional safety analysis methods for safety analysis,it is often concerned about the reliability of the components of the system,it is difficult to avoid the occurrence of accidents due to component interactions,software design defects,etc.STAMP regards safety issues as control problems and considers accidents.It is due to lack of control.In this paper,the missile attack process is taken as an example to establish the STAMP model of the missile attack process.The STPA method is used to identify the unsafe control actions that lead to missile attack failure and analyze the key cause.Finally,some of the unsafe control actions are simulated and analyzed.It provides a reference for reducing missile mission failures and missile design.