基于IPO功能分解的嵌入式软件故障树分层构建方法  

Hierarchical construction method for embedded software fault tree based on IPO function decomposition

作　　者：黄百乔[1,2] 赖婧[1] 张虹[1] 陆民燕[1] 

机构地区：[1]北京航空航天大学可靠性与系统工程学院,北京100191 [2]中国船舶工业集团公司船舶系统工程部,北京100094

出　　处：《沈阳工业大学学报》2013年第2期204-211,共8页Journal of Shenyang University of Technology

基　　金："十一五"国防预研基金资助项目(5131907XXX)

摘　　要：针对嵌入式软件需求阶段的安全性分析方法中故障树分析缺少构建方法的问题,结合嵌入式系统的特点,提出了一种故障树分层构建方法.为构建各功能层内部的故障树,提出了基于IPO的功能分解法,采用失效模式与影响分析方法对分解的各部分功能进行影响分析,以确定构建故障树的建树元素,并提出了功能层内部故障树构建的框架模型与各功能层故障树的层次关系,实现了部分故障树构建的自动化,提高了故障树构建的完整性、准确性与效率.在某型号发动机控制软件的安全性分析中,应用上述方法指导该嵌入式软件故障树的构建与分析,验证了该方法的可行性和有效性.To solve the lack of construction methods for fault tree analysis （FrA） in the safety analysis methods at the requirement stage of embedded software, a hierarchical construction method for fault tree （FT） was proposed in combination with the characteristics of embedded system. In order to construct the internal PT of each functional layer, the IPO-based （input, process, output） function decomposition method was proposed. In addition, the effect analysis of various decomposed functions were carried out through adopting the FMEA （failure modes and effect analysis） method, and the construction elements of PT were determinined. Furthermore, the hierarchical relationship between the framework model for PT construction inside function layers and Fr of each functional layer was proposed. And thus, the automation of P-T construction is partially realized, and the completeness, correctness and effectiveness of PT construction get improved. In the safety analysis on the control software of an engine with certain type, the above-mentioned method was used to guide the b＇T construction and analysis of the proposed embedded software. The feasibility and effectiveness of the method is proved.

关 键 词：嵌入式软件 软件故障树 分层分析 软件安全性 软件失效模式与影响 输入-处理过程-输出 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]