IMA重构的功能危害分析方法研究  

Research on Functional Hazard Analysis Method for IMA Reconfiguration

作　　者：陈龙[1] 王立松[1] 

机构地区：[1]南京航空航天大学计算机科学与技术学院,南京210016

出　　处：《计算机工程》2016年第6期151-155,160,共6页Computer Engineering

基　　金：国家"973"计划基金资助项目"面向大型飞机综合化航空电子系统安全性基础问题研究"(2014CB744900)

摘　　要：传统综合模块化航电(IMA)重构危害分析方法是一种静态的系统结构危害分析方法,无法对IMA重构动态的失效情形进行危害分析,经典Petri网的分析方法在进行系统动态运行危害分析时需要生成所有可达图,容易导致可达图的状态空间过大。为此,提出一种新的IMA重构危害分析方法。该方法基于IMA重构控制进程的AADL模型,将重构控制流模型转化为Petri网模型,利用Petri网的向回关键态算法,并基于Petri网的可达性分析方法对IMA重构功能的危害进行分析。分析结果表明,该方法不仅解决了IMA重构动态运行时的危害问题,而且克服了传统Petri网可达性分析带来的状态爆炸,能识别出引起高风险状态的关键控制要素。The traditional hazard analysis methods for Integrated Modular Avionics（IMA） reconfiguration are static system structure hazard analysis method.It cannot make hazard analysis on the failure condition of the dynamic reconfiguration of IMA,and the classical Petri net based analysis method needs to generate all the reachable graph when the system dynamic analysis is carried out,it is easy to cause the state space of the reachable graph to be too large.Therefore,a new hazard analysis method for IMA reconfiguration is proposed.It is based on the AADL model of the control process of IMA reconfiguration.The reconfiguration control flow model is transformed into Petri net model,uses a backwards critical state algorithm of Petri net,and the hazards of IMA reconfiguration function are analyzed based on the reachability analysis of Petri net.Analysis results show that,it not only overcomes the weakness of the traditional system function hazards analysis method that is difficult to analysis runtime hazard behavior,but also avoids the state explosion problem brought by the traditional Petri net reachability analysis.Meanwhile,the critical control elements which can cause high-risk status are identified.

关 键 词：综合模块化航电 重构 PETRI网模型 危害分析 关键态算法 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]