GSN安全论证方法在产品安全案例变更管理中的应用

Application of GSN Safety Demonstration Method in Change Management of Product Safety Case

在产品安全生命周期中,安全案例不可避免地会受到不断变化的法规要求、额外的安全证据以及设计变更的影响。为了保持对系统安全的准确描述,必须评估安全案例变更对系统原始安全论据的影响。文章采用目标结构表示法(goal structuring notation,GSN)构建安全论证变更管理模型,提出一个清晰的安全案例变更管理分析流程用于明确地表示安全目标与安全案例间相互依赖性,从而能够结构化和系统化地推理和处理变更。目前,该方法已应用于轨道交通信号设备的变更管理中,取得了良好的效果。

In the life cycle of product safety,safety cases are inevitably affected by changing regulatory requirements,additional safety evidence and design changes.In order to maintain an accurate description of system security,it is necessary to assess the impact of changes on the original security arguments.In this paper,the goal structuring notation(GSN)was used to construct the security demonstration change management model,and a clear security case change management analysis process was proposed to clearly express the interdependence between security objectives and security cases,so that the change can be reasoned and processed structurally and systematically.This method has been applied in the change management of rail transit signal equipment,and good results have been achieved.