Abstract:In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems. However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of concern are digital common cause failures specifically due to software defects. These failures by the software can occur in both the control and monitoring of a system. While many methods have been proposed to identify software failure modes, such as Systems Theoretic Process Analysis, Hazard and Consequence Analysis for Digital Systems, etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks Unsafe Control Actions, which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and Unsafe Information Flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy guided Systems theoretic Hazard Analysis methodology. The case studies demonstrate the use of UIFs and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method clarifies fault tree construction when multiple component dependencies are present in the system.

Automated Checking and Visualization of Interlocks in the ISAC Control System

Reverse Engineering Physical Semantics of PLC Program Variables Using Control Invariants.

Industrial-Strength Verification of Solid State Interlocking Programs

Designing Actively Secure, Highly Available Industrial Automation Applications

Use of EPICS for High-Level Control of SNS Conventional Facilities

Generating EPICS IOC Databases from a Relational Database - a Different Approach

Machine Interlock and Protection System Based on PLC for Compact Cyclotron

NIPAD: a Non-Invasive Power-Based Anomaly Detection Scheme for Programmable Logic Controllers

Detecting PLC Intrusions Using Control Invariants

Programmable Logic Controllers Past Linear Temporal Logic for Monitoring Applications in Industrial Control Systems

Applying Model Checking to Highly-Configurable Safety Critical Software: The SPS-PPS PLC Program

The EPICS control system for IsoDAR

Design and Implementation of Automatic Verification for PLC Systems

PLCverif: Status of a Formal Verification Tool for Programmable Logic Controller

Decision Support System for the APS Control System

Walking Under the Ladder Logic: PLC-VBS, a PLC Control Logic Vulnerability Discovery Tool

Design and realization of vacuum control and interlock system for SESRI project

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

An Approach to Automatic Development of Interlocking Logic Based on Statechart

Detecting Safety and Security Faults in PLC Systems with Data Provenance

Stealthy Deception Attacks Against SCADA Systems