面向IMA通用系统管理的STPA安全性分析

STPA safety analysis on IMA generic system management

通用系统管理(GSM)是综合模块化航电(IMA)系统服务中不可或缺的一部分,为解决传统安全性分析方法难以捕获复杂系统中组件交互所带来的危险。首先,研究GSM的工作环境及相关组件的功能划分,确定层次化系统管理的工作流程;其次,面向GSM建立基于系统理论事故过程的扩展模型,并通过系统理论过程分析(STPA)对动态重构实例的不安全控制行为(UCA)进行识别,生成相关致因场景及其对应的安全性需求;最后,通过时间自动机对实例进行仿真验证。结果表明:模型的逻辑和时序的完整性及UCA的可达性,可为GSM的安全性分析提供形式化依据。

GSM is an indispensable part of IMA system services. In order to address the difficulties traditional safety analysis methods have in capturing risks caused by component interaction in complex systems,firstly,GSM work environment and function division of its components were studied,and workflow of hierarchical system management was determined. Secondly,an extended model based on accident process of systematic theory was established for GSM,unsafe control actions( UCA) of dynamic reconfiguration case were identified through STPA, and relevant causative scenarios and their corresponding safety requirements were generated. Finally,the case is simulated and verified by timed automata. The results show that the model’s logic and timing integrity and reachability of UCA behavior provide a formal basis for GSM safety analysis.