Abstract:In recent years, there has been considerable effort to modernize existing and new nuclear power plants with digital instrumentation and control systems. However, there has also been considerable concern both by industry and regulatory bodies for the risk and consequence analysis of these systems. Of concern are digital common cause failures specifically due to software defects. These failures by the software can occur in both the control and monitoring of a system. While many methods have been proposed to identify software failure modes, such as Systems Theoretic Process Analysis, Hazard and Consequence Analysis for Digital Systems, etc., these methods are focused primarily on the control action pathway of a system. In contrast, the information feedback pathway lacks Unsafe Control Actions, which are typically related to software basic events; thus, assessment of software basic events in such systems is unclear. In this work, we present the idea of intermediate processors and Unsafe Information Flow (UIF) to help safety analysts trace failure mechanisms in the feedback pathway and how they can be integrated into a fault tree for improved assessment capability. The concepts presented are demonstrated in two comprehensive case studies, a smart sensor integrated platform for unmanned autonomous vehicles and another on a representative advanced human system interface for safety critical plant monitoring. The qualitative software basic events are identified, and a fault tree analysis is conducted based on a modified Redundancy guided Systems theoretic Hazard Analysis methodology. The case studies demonstrate the use of UIFs and intermediate processors in the fault tree to improve traceability of software failures in highly complex digital instrumentation feedback. The improved method clarifies fault tree construction when multiple component dependencies are present in the system.

A Case Study of Software Security Test Based on Defects Threat Tree Modeling

Research on Security Threat Monitoring and Testing Framework in Software - Defined Network Based on Depth Learning

Fine-grained Commit-level Vulnerability Type Prediction by CWE Tree Structure.

Modeling of the Mimic Defense Based on Heterogeneous Redundancy

Vulnerability Detection For Smart Grid Devices Via Static Analysis

Research on Defect Detection Technology of Trusted Behavior Decision Tree Based on Intelligent Data Semantic Analysis of Massive Data

A Threat Model Driven Approach for Security Testing

Towards A Structured Model for Software Vulnerabilities

A Hybrid Approach to Detecting Security Defects in Programs

Security Defect Detection via Code Review: A Study of the OpenStack and Qt Communities

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

A Case Study in Specification Defects Detection Using Statecharts

Software Severe Defects Evaluation Based on Complex Network Analysis

Automated Software Testing Starting from Static Analysis: Current State of the Art

Quantitative Risk Assessment of Threats on SCADA Systems Using Attack Countermeasure Tree

Using Models To Assess Impact Of Defective Software

A Method for Detecting Code Security Vulnerability Based on Variables Tracking with Validated-Tree

Evaluating C/C++ Vulnerability Detectability of Query-Based Static Application Security Testing Tools

Protocol Security Testing with SPIN and TTCN-3

Vulnerability Analysis Framework for Binaries Based on Model Checking

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA