Functional safety: matching the complexity of methods with the complexity of systems

Ma\^itrise des Risques et de S\^uret\'e de Fonctionnement, Lambda-Mu 18, Oct 2012, Tours, France. Institut pour la Ma\^itrise des Risques, pp.2E-2, Actes du 18\`eme Congr\`es de Ma\^itrise des Risques et de S\^uret\'e de Fonctionnement, Lambda-Mu 18 In line with the IEC 61508 functional sa...

Full description

Saved in:
Bibliographic Details
Main Authors Brissaud, F, Declerck, B
Format Journal Article
LanguageEnglish
Published 20.01.2015
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:Ma\^itrise des Risques et de S\^uret\'e de Fonctionnement, Lambda-Mu 18, Oct 2012, Tours, France. Institut pour la Ma\^itrise des Risques, pp.2E-2, Actes du 18\`eme Congr\`es de Ma\^itrise des Risques et de S\^uret\'e de Fonctionnement, Lambda-Mu 18 In line with the IEC 61508 functional safety standard, it is required to assess the safety integrity of a system due to random hardware failures. For a rarely used function (operating in a low demand mode), the measurement used is average probability of a dangerous failure on demand (PFDavg). In this paper, four methods have been applied to different configurations of a case study: failure tree analysis with the software GRIF/Tree, multi-phase Markov graphs with the software GRIF/Markov, stochastic Petri nets with predicates with the software GRIF/Petri, and approximate equations (developed by DNV and different from those given in the IEC 61508 standard) using the software OrbitSIL. It is shown that all these methods can lead to similar results for the estimating of the PFDavg, taking into account the required characteristics of the standard. The choice of method must be made without bias, based on an agreement between the modelling efforts, goals, and the system properties. To assist the analyst in this task, a discussion of the benefits and limitations of each of these methods is presented.
DOI:10.48550/arxiv.1501.04938