@inproceedings{JungJedlitschkaHoefigetal.2013, author = {Jung, Jessica and Jedlitschka, Andreas and H{\"o}fig, Kai and Domis, Dominik and Hiller, Martin}, title = {A controlled experiment on component fault trees}, series = {International Conference on Computer Safety, Reliability, and Security (SAFECOMP 2013)}, booktitle = {International Conference on Computer Safety, Reliability, and Security (SAFECOMP 2013)}, publisher = {Springer}, address = {Berlin, Heidelberg}, pages = {285 -- 292}, year = {2013}, abstract = {In safety analysis for safety-critical embedded systems, methods such as FMEA and fault trees (FT) are strongly established in practice. However, the current shift towards model-based development has resulted in various new safety analysis methods, such as Component Integrated Fault Trees (CFT). Industry demands to know the benefits of these new methods. To compare CFT to FT, we conducted a controlled experiment in which 18 participants from industry and academia had to apply each method to safety modeling tasks from the avionics domain. Although the analysis of the solutions showed that the use of CFT did not yield a significantly different number of correct or incorrect solutions, the participants subjectively rated the modeling capacities of CFT significantly higher in terms of model consistency, clarity, and maintainability. The results are promising for the potential of CFT as a model-based approach.}, language = {en} } @inproceedings{JungHoefigDomisetal.2013, author = {Jung, Jessica and H{\"o}fig, Kai and Domis, Dominik and Jedlitschka, Andreas and Hiller, Martin}, title = {Experimental comparison of two safety analysis methods and its replication}, series = {2013 ACM / IEEE International Symposium on Empirical Software Engineering and Measurement, December 2013, Baltimore, MD, USA.}, booktitle = {2013 ACM / IEEE International Symposium on Empirical Software Engineering and Measurement, December 2013, Baltimore, MD, USA.}, isbn = {978-0-7695-5056-5}, pages = {223 -- 232}, year = {2013}, abstract = {(Background) Empirical Software Engineering (SE) strives to provide empirical evidence about the pros and cons of SE approaches. This kind of knowledge becomes relevant when the issue is whether to change from a currently employed approach to a new one or not. An informed decision is required and is particularly important in the development of safety-critical systems. For example, for the safety analysis of safety-critical embedded systems, methods such as Failure Mode and Effect Analysis (FMEA) and Fault Tree Analysis (FTA) are used. With the advent of model-based systems and software development, the question arises whether safety engineering methods should also be adopted. New technologies such as Component Integrated Fault Trees (CFT) come into play. Industry demands to know the benefits of these new methods over established ones such as Fault Trees (FT). (Methods) For the purpose of comparing CFT and FT with regard to the capabilities of the safety analysis methods (such as quality of the results) and to the participants' rating of the consistency, clarity, and maintainability of the methods, we designed a comparative study as a controlled experiment using a within-subject design. The experiment was run with seven academic staff members working towards their PhD. The study was replicated with eleven domain experts from industry. (Results) Although the analysis of the tasks' solutions showed that the use of CFT did not yield a significantly different number of correct or incorrect solutions, the participants rated the modeling capacities of CFT higher in terms of model consistency, clarity, and maintainability. (Conclusion) From this first evidence, we conclude that CFT have the potential of being beneficial for companies looking for a safety analysis approachfor projects using model-based development.}, language = {en} } @inproceedings{HoefigDomis2011, author = {H{\"o}fig, Kai and Domis, Dominik}, title = {Failure-Dependent execution time analysis}, series = {Proceedings of the Joint ACM SIGSOFT Conference-QoSA and ACM SIGSOFT Symposium-ISARCS on Quality of Software Architectures-QoSA and Architecting Critical Systems-ISARCS, Boulder, Colorado, USA, June 2011.}, booktitle = {Proceedings of the Joint ACM SIGSOFT Conference-QoSA and ACM SIGSOFT Symposium-ISARCS on Quality of Software Architectures-QoSA and Architecting Critical Systems-ISARCS, Boulder, Colorado, USA, June 2011.}, publisher = {ACM}, address = {New York, NY, USA}, pages = {115 -- 122}, year = {2011}, abstract = {The growing complexity of safety-critical embedded systems is leading to an increased complexity of safety analysis models. Often used fault tolerance mechanisms have complex failure behavior and produce overhead compared to systems without such mechanisms. The question arises whether the overhead for fault tolerance is acceptable for the increased safety of a system. Manually modeling the timing behavior is cost intensive and error prone. Current approaches of safety analysis and execution time analysis are not able to reflect the timing behavior of complex mechanisms according to failures. In this paper, we describe an approach that combines safety analysis models with execution times to extract different execution times for different failure conditions. This provides a detailed view on the safety behavior in combination with the produced overhead and allows to find and certify appropriate fault tolerance mechanisms.}, language = {en} } @inproceedings{DomisHoefigTrapp2010, author = {Domis, Dominik and H{\"o}fig, Kai and Trapp, Mario}, title = {A consistency check algorithm for component-based refinements of fault trees}, series = {2010 IEEE 21st International Symposium on Software Reliability Engineering (ISSRE), November 2010, San Jose, CA, USA.}, booktitle = {2010 IEEE 21st International Symposium on Software Reliability Engineering (ISSRE), November 2010, San Jose, CA, USA.}, pages = {171 -- 180}, year = {2010}, abstract = {The number of embedded systems in our daily lives that are distributed, hidden, and ubiquitous continues to increase. Many of them are safety-critical. To provide additional or better functionalities, they are becoming more and more complex, which makes it difficult to guarantee safety. It is undisputed that safety must be considered before the start of development, continue until decommissioning, and is particularly important during the design of the system and software architecture. An architecture must be able to avoid, detect, or mitigate all dangerous failures to a sufficient degree. For this purpose, the architectural design must be guided and verified by safety analyses. However, state-of-the-art component-oriented or model-based architectural design approaches use different levels of abstraction to handle complexity. So, safety analyses must also be applied on different levels of abstraction, and it must be checked and guaranteed that they are consistent with each other, which is not supported by standard safety analyses. In this paper, we present a consistency check for CFTs that automatically detects commonalities and inconsistencies between fault trees of different levels of abstraction. This facilitates the application of safety analyses in top-down architectural designs and reduces effort.}, language = {en} } @inproceedings{AdlerDomisHoefigetal.2010, author = {Adler, Rasmus and Domis, Dominik and H{\"o}fig, Kai and Kemmann, S{\"o}ren and Kuhn, Thomas and Schwinn, Jean- Pascal and Trapp, Mario}, title = {Integration of component fault trees into the UML}, series = {International Conference on Model Driven Engineering Languages and Systems.}, booktitle = {International Conference on Model Driven Engineering Languages and Systems.}, publisher = {Springer-Verlag}, address = {Berlin, Heidelberg}, pages = {312 -- 327}, year = {2010}, abstract = {Efficient safety analyses of complex software intensive embedded systems are still a challenging task. This article illustrates how model-driven development principles can be used in safety engineering to reduce cost and effort. To this end, the article shows how well accepted safety engineering approaches can be shifted to the level of model-driven development by integrating safety models into functional development models. Namely, we illustrate how UML profiles, model transformations, and techniques for multi language development can be used to seamlessly integrate component fault trees into the UML.}, language = {en} }