• 제목/요약/키워드: Software and system safety

검색결과 802건 처리시간 0.022초

A DEVELOPMENT FRAMEWORK FOR SOFTWARE SECURITY IN NUCLEAR SAFETY SYSTEMS: INTEGRATING SECURE DEVELOPMENT AND SYSTEM SECURITY ACTIVITIES

  • Park, Jaekwan;Suh, Yongsuk
    • Nuclear Engineering and Technology
    • /
    • 제46권1호
    • /
    • pp.47-54
    • /
    • 2014
  • The protection of nuclear safety software is essential in that a failure can result in significant economic loss and physical damage to the public. However, software security has often been ignored in nuclear safety software development. To enforce security considerations, nuclear regulator commission recently issued and revised the security regulations for nuclear computer-based systems. It is a great challenge for nuclear developers to comply with the security requirements. However, there is still no clear software development process regarding security activities. This paper proposes an integrated development process suitable for the secure development requirements and system security requirements described by various regulatory bodies. It provides a three-stage framework with eight security activities as the software development process. Detailed descriptions are useful for software developers and licensees to understand the regulatory requirements and to establish a detailed activity plan for software design and engineering.

철도소프트웨어 안전성 관리체계 계시방안 연구 (A Study on Derivation of Railway Software Safety Management Procedure)

  • 정의진;신경호
    • 대한전기학회:학술대회논문집
    • /
    • 대한전기학회 2006년도 추계학술대회 논문집 전기기기 및 에너지변환시스템부문
    • /
    • pp.244-246
    • /
    • 2006
  • Softwares in railway system are being used in the area of railway control system, directly associated to safety. Because the instinct characteristic of Software is uncertainty, Software development without safety insurance is very hazardous situation. In order to derive safety certification process in the railway system, certification and approval processes in the nuclear, aviation, and military area are studied. Software quality should be improved by two aspects : one is product aspect, another is process aspect. GS(Good Software) and ES(Excellent Software) certification can be exemplified in a product aspect approach. In those process certification, CMMI (Capability Maturity Model Integration) or SPICE (Software Process Improvement and Capability dEtermination : ISO/IEC15504) is being used as models for assessing process maturity of organization. Following the studies, safety management procedure in the railway system is suggested.

  • PDF

철도시스템 소프트웨어 변경영향 분석을 위한 자동화 도구 개발 (Implementation of Automatic Tool for S/W Change Impact Analysis in Railway System)

  • 조현정;황종규;김용규
    • 전기학회논문지P
    • /
    • 제58권2호
    • /
    • pp.95-100
    • /
    • 2009
  • Recent advances in computer technology have brought more dependence on software to railway systems. Hence, the safety assurance of the vital software running on the railway system is very critical task and yet, not many works have been done. While much efforts have been reported to improve electronic hardware's safety, not so much systematic approaches to evaluate software's safety. In this paper, we suggested an automated analysis tool for S/W change impact in railway system, and presented its result of implementation. The analysis items in the implemented tool had referred to the international standards in relation to the software for railway system, such as IEC 61508 and IEC 62279. In these international standards, 'change impact analysis' for railway system S/W has to be required mandatorily. The proposed tool can be utilized at the assessment stage and also the software development stage.

안전에 중요한 소프트웨어 개발을 위한 확인 및 검증 (Verification and Validation to develop Safety-critical Software)

  • 이종복;서상문;금종용
    • 한국품질경영학회:학술대회논문집
    • /
    • 한국품질경영학회 2004년도 품질경영모델을 통한 가치 창출
    • /
    • pp.114-119
    • /
    • 2004
  • Software verification and validation(V&V) is a means to develop high-quality software and assure safety and reliability for software. Also, we can achieve the desired software quality through systematic V&V activities. The software to be applied safety critical system like nuclear power plants is required to setup the V&V methodology that comply with licensing requirements for nuclear power plants and should be performed V&V activities according to it. In this paper, we classified safety-critical, safety-related and non-safety for software according to safety function to be peformed and define V&V activities to be applied software grade. Also, we defined V&V activities, procedures and documentation for each phase of software development life cycle and showed techniques and management to perform V&V. Finally, we propose the V&V framework to be applied software development of SMART(System-integrated Modular Advanced ReacTor) MMIS (Man-Machine Interface System) and to comply with domestic licensing requirements.

  • PDF

"3+3 PROCESS" FOR SAFETY CRITICAL SOFTWARE FOR I&C SYSTEM IN NUCLEAR POWER PLANTS

  • Jung, Jae-Cheon;Chang, Hoon-Sun;Kim, Hang-Bae
    • Nuclear Engineering and Technology
    • /
    • 제41권1호
    • /
    • pp.91-98
    • /
    • 2009
  • The "3+3 Process" for safety critical software for nuclear power plants' I&C (Instrumentation and Control system) has been developed in this work. The main idea of the "3+3 Process" is both to simplify the software development and safety analysis in three steps to fulfill the requirements of a software safety plan [1]. The "3-Step" software development process consists of formal modeling and simulation, automated code generation and coverage analysis between the model and the generated source codes. The "3-Step" safety analysis consists of HAZOP (hazard and operability analysis), FTA (fault tree analysis), and DV (design validation). Put together, these steps are called the "3+3 Process". This scheme of development and safety analysis minimizes the V&V work while increasing the safety and reliability of the software product. For assessment of this process, validation has been done through prototyping of the SDS (safety shut-down system) #1 for PHWR (Pressurized Heavy Water Reactor).

Safety-critical 소프트웨어 적용을 위한 소프트웨어 개발 절차 (A Software Engineering Process for Safety-critical Software Application)

  • Kang, Byung-Heon;Kim, Hang-Bae;Chang, Hoon-Seon;Jeon, Jong-Sun;Park, Suk-Joon
    • Nuclear Engineering and Technology
    • /
    • 제27권1호
    • /
    • pp.84-95
    • /
    • 1995
  • Application of computer software to safety-critical systems is on the increase. To be successful, the software must be designed and constructed to meet the functional and performance requirements of the system. For safety reason, the software must be demonstrated not only to meet these requirements, but also to operate safely as a component within the system. For longer-term cost consideration, the software must be designed and structured to ease future maintenance and modifications. This paper present a software engineering process for the production of safety-critical software for a nuclear power plant The presentation is expository in nature of a viable high quality safety-critical software development. It is based on the ideas of a rational design process and on the experience of the adaptation of such process in the production of the safety-critical software for the Shutdown System Number Two of Wolsong 2, 3 & 4 nuclear power generation plants. This process is significantly different from a conventional process in terms of rigorous software development phases and software design techniques. The process covers documentation, design, verification and testing using mathematically precise notations and highly reviewable tabular format to specify software requirements and software design. These specifications allow rigorous, stepwise verification of software design against software requirements, and code against software design using static analysis. The software engineering process described in this paper applies the principle of information-hiding decomposition in software design using a modular design technique so that when a change is' required or an error is detected, the affected scope can be readily and confidently located. It also facilitates a sense of high degree of confidence in the ‘correctness’ of the software production, and provides a relatively simple and straightforward code implementation effort.

  • PDF

융복합제품을 위한 모듈방식의 안전인증체계 설계 -자율주행 자동차를 중심으로- (Designing a Modular Safety Certification System for Convergence Products - Focusing on Autonomous Driving Cars -)

  • 신완선;김지원
    • 품질경영학회지
    • /
    • 제46권4호
    • /
    • pp.1001-1014
    • /
    • 2018
  • Purpose: Autonomous driving cars, which are often represent the new convergence product, have been researched since the early years of 1900 but their safety assurance policies are yet to be implemented for real world practices. The primary purpose of this paper is to propose a modular concept based on which a safety assurance system can be designed and implemented for operating autonomous driving cars. Methods: We combine a set of key attributes of CE mark (European Assurance standard), E-Mark (Automobile safety assurance system), and A-SPICE (Automobile software assurance standard) into a modular approach. Results: Autonomous vehicles are emphasizing software safety, but there is no integrated safety certification standard for products and software. As such, there is complexity in the product and software safety certification process during the development phase. Using the concept of module, we were able to come up with an integrated safety certification system of product and software for practical uses in the future. Conclusion: Through the modular concept, both international and domestic standards policy stakeholders are expected to consider a new structure that can help the autonomous driving industries expedite their commercialization for the technology advanced market in the era of Industry 4.0.

소프트웨어 안전성 평가를 위한 소프트웨어 고장 유형과 영향 분석에 관한 연구 (A Study on the Software Fault Modes and Effect Analysis for Software Safety Evaluation)

  • 김명희;박만곤
    • 한국멀티미디어학회논문지
    • /
    • 제15권1호
    • /
    • pp.115-130
    • /
    • 2012
  • 오늘날 대다수의 안전필수 시스템들(Safety-Critical Systems)에는 컴퓨터, 전기 및 전자 부품이나 장치들에 소프트웨어를 칩에 내장하거나 제어용 소프트웨어 시스템이 탑재되어 구축되고 있다. 이에 따라, 컴퓨터 소프트웨어를 내장하였거나 탑재한 시스템들의 안전성을 평가하기 위한 여러 가지의 결함 분석 기법들이 제안되어져 오고 있다. 이러한 소프트웨어 결함 분석 기법들은 전통적으로는 하나의 안전필수 시스템을 분석하는데 단지 하나의 방법으로만 분석해 왔으나, 시스템의 종류와 특성이 다양해지면서 그 시스템에 가장 알맞은 결함 분석 기법이 동원되어야 함은 필수적이다. 본 연구에서는, 안전필수 시스템에서 소프트웨어의 크기가 비교적 작고, 안전성과 관련한 시스템 제어 반응 시간이 특별히 민감하지 않는 소프트웨어의 안전성을 평가하는 방법으로 결함트리 분석(FTA)과 소프트웨어 고장 유형 및 영향 분석(FMEA)을 결합한 시스템 결함 분석 방법을 제안하고 유비쿼터스 헬스케어 시스템을 이용하여 사례연구를 수행하고자 한다.

안전을 고려한 철도소프트웨어 개발방법론 도출방안 연구 (Development of Software Development Methodology with Aspect of Railway Safety)

  • 정의진;신경호
    • 대한전기학회:학술대회논문집
    • /
    • 대한전기학회 2007년도 추계학술대회 논문집 전기기기 및 에너지변환시스템부문
    • /
    • pp.201-203
    • /
    • 2007
  • Safety critical systems are those in which a failure can have serious and irreversible consequences. Nowadays digital technology has been rapidly applied to critical system such as railways, airplanes, nuclear power plants, vehicles. The main difference between analog system and digital system is that the software is the key component of the digital system. The digital system performs more varying and highly complex functions efficiently compared to the existing analog system because software can be flexibly designed and implemented. The flexible design make it difficult to predict the software failures. This paper reviews safety standard and criteria for safety critical system such as railway system and suggests software development methodology for more detail description.

  • PDF

Software Reliability of Safety Critical FPGA-based System using System Engineering Approach

  • Pradana, Satrio;Jung, Jae Cheon
    • 시스템엔지니어링학술지
    • /
    • 제14권2호
    • /
    • pp.49-57
    • /
    • 2018
  • The main objective of this paper is come up with methodology approach for FPGA-based system in verification and validation lifecycle regarding software reliability using system engineering approach. The steps of both reverse engineering and re-engineering are carried out to implement an FPGA-based of safety critical system in Nuclear Power Plant. The reverse engineering methodology is applied to elicit the requirements of the system as well as gain understanding of the current life cycle and V&V activities of FPGA based-system. The re-engineering method is carried out to get a new methodology approach of software reliability, particularly Software Reliability Growth Model. For measure the software reliability of a given FPGA-based system, the following steps are executed as; requirements definition and measurement, evaluation of candidate reliability model, and the validation of the selected system. As conclusion, a new methodology approach for software reliability measurement using software reliability growth model is developed.