This paper summarizes and examines the probabilistic criteria (regulations and guidance) in two U.S. government documents intended to ensure acceptably-safe designs of commercial-airplane systems, which are also the probabilistic criteria used by the Boeing Commercial Airplanes company. Specialized ...
Tutorial1.5 hoursAnalysis of an Energy Storage System (ESS) Failure and Fire Event AbstractThis tutorial will present a case study and hands-on training regarding the design, analysis, test and certification of a commercial Lithium Ion Energy Storage System (ESS) that was involved in a recent fire e...
Currently, a 20J fragment projection curve is being used by the Insensitive Munitions (IM) community to distinguish between hazardous and benign energetic responses for various munition systems subjected to simulated combat threats. Substantial resources are being expended to obtain benign responses...
The tutorial provides a brief overview of the key historical events that have shaped the modern U.S. nuclear weapon system safety design philosophy, followed by a brief overview of the nuclear weapon safety process after which there is a focus on describing the nuclear safety design principles of in...
Safely developing self-driving vehicles presents technical challenges. Among the key technical challenges are how to confidently demonstrate the safety of a self-driving vehicle when the number of permutations of operating conditions, scenarios, system inputs, etc. are complex, uncertain, and potent...
Mr. Brian Connell and Mr. David Musgrave of the Combat Capabilities Development Center Armaments Center (CCDC AC) at Picatinny Arsenal, New Jersey, have adapted a Gamification approach to Software Safety Instruction from a technique previously used to teach the Agile Development Philosophy. The Gami...
(Note: This paper follows on from the paper presented last year at ISSC. This new paper serves to provide more technical detail (the how?) for the integration framework) There are many approaches to solving the safety-security integration problem. Regulatory bodies have also attempted to unify saf...
When a system Safety Function fails it is imperative to be able to identify and analyze the potential causal contributors in a timely way and support the conclusion with compelling evidence. Yet experience has shown that this can be a formidable challenge and far too often opinions and unsubstanti...
This paper documents a proposed approach using Decision Analysis to aid in the selection of a software architecture intended to replace that of a legacy monolithic system. The new design supports a safety by design methodology, improves code maintenance by making the code base more easily main...
Non-deterministic latency and jitter issues have arisen with the increased use of commercial multicore processors (MCP) as the hardware platforms for hosting Department of Defense (DoD) systems. Within the civilian world of avionics flight control, an approach to dealing with non-deterministic laten...
Divergence theory and its practical application as an innovation exercise seeks to ?open the aperture? and first expand the problem space, as opposed to just immediately converging toward a viable solution. This paper shares a use case application of a simple but powerful divergence metho...
The tutorial provides a historical overview of key considerations that have shaped modern nuclear weapon safety philosophy and, in turn, weapon safety architectures. Key considerations include the concept of a ?wooden? bomb, insights gained from weapon accidents, the introduction of standardized pro...
This tutorial supports the ISSC37 theme regarding ?training for both beginners to learn to utilize system safety methodology in their Journey to Excellence and for those more experienced safety professionals who want to discuss, explore and incorporate how others are effectively utilizing system saf...
Human space transportation safety and risk management has evolved significantly over the sixty-plus years of strict oversight by the National Aeronautics and Space Administration (NASA). Beginning in the 1960s, the criticality of transparency and open reporting of safety concerns and potential areas...
Over the past 73 years the concept of Nuclear Weapon Detonation Safety within the United States has evolved from a simple Safing Plug, used on Little Boy and Fat Man, to the Stronglinks, Weaklinks, Barrier and collocation used today. This tutorial begins with a review of the worst Nuclear Weapon Acc...
This updated tutorial presents key concepts, techniques, and case studies of Quantitative Risk Management in a manner that can be comprehended by newcomers and appreciated by professionals seeking to better understand quantitative methods. With a focus on risk management, new topics include comparin...
Effective communication between the system safety engineer and the Project Manager is an essential characteristic of good risk management in a robust system safety program. However, these two disciplines utilize similar terms with disparate meanings than can lead to sub-optimal technical or progr...
Integrated safety and security assurance for complex systems is difficult for many technical and socio-technical reasons such as mismatched processes, inadequate information, differing use of language and philosophies, etc.. Many co-assurance techniques rely on disregarding some of these challenges...
In system security, it is important to be able to analytically investigate a system in a provable, quantitative way. Finding system vulnerabilities should not be left up to guess work. Without a verifiable method of demonstrating weak points, efforts to improve security may simply be wasted. ...
This tutorial will be an update to a tutorial I have presented at the 2016, 2017 and 2018 ISSC. Topics presented include:Historical examples of inherently unsafe systems being made safe by the application of design features to mitigate hazardsDiscussion of the unique ways in which electronics and so...
The Sympathetic Reaction test is used for Hazard Classification of munitions and Insensitive Munitions assessments. The results determine the munition's storage and handling procedures and are used in allotting investment funds for improving munition safety. The NATO Insensitive Munitions (IM) Sympa...
Implementing STEM Outreach Programming with System Safety Round Table Panel Discussion Tiffany C. Owens, BS Microelectronics Engineering; Department of the Navy, Naval Surface Warfare Center, Dahlgren Division; Dam Neck Activity; Dahlgren, Virginia, USA Keywords: STEM Outreach, System Safety Educati...
Model-Based Systems Engineering (MBSE) has gained momentum as the predominant method of analyzing and deriving system requirements as well as verifying and validating system performance. Over the years, several frameworks have gained prominence as approved methods and formal techniques to model syst...
? The importance of safety in the development of safety-critical automotive systems has been increasingly growing, especially with the introduction of integrated driver assist and automated driving systems. The ISO 26262: Functional Safety ?Road Vehicles Standard defines safety as the absence of unr...
This tutorial illustrates a step-by-step process to apply a quantitative analysis methodology to mishap data to approximate the distribution of both the probability and severity of a mishap and examine likely behavior of the co-distribution of probability and severity as the risk reduction process i...
??The Hyperloop Transportation System is being designed and prototyped in a rapidly evolving, flexible and lean (i.e. agile) corporate environment by multiple engineering teams that span several continents. This effort by Hyperloop Transportation Technologies (HTT) represents the convergence of tech...