Author Login Editor-in-Chief Peer Review Editor Work Office Work

Computer Engineering

Previous Articles     Next Articles

Research on Functional Hazard Analysis Method for IMA Reconfiguration

CHEN Long,WANG Lisong   

  1. (College of Computer Science and Technology,Nanjing University of Aeronautics and Astronautics,Nanjing 210016,China)
  • Received:2015-06-05 Online:2016-06-15 Published:2016-06-15

IMA重构的功能危害分析方法研究

陈龙,王立松   

  1. (南京航空航天大学 计算机科学与技术学院,南京 210016)
  • 作者简介:陈龙(1988-),男,硕士研究生,主研方向为信息安全、嵌入式系统;王立松,副教授。
  • 基金资助:
    国家“973”计划基金资助项目“面向大型飞机综合化航空电子系统安全性基础问题研究”(2014CB744900)。

Abstract: The traditional hazard analysis methods for Integrated Modular Avionics(IMA) reconfiguration are static system structure hazard analysis method.It cannot make hazard analysis on the failure condition of the dynamic reconfiguration of IMA,and the classical Petri net based analysis method needs to generate all the reachable graph when the system dynamic analysis is carried out,it is easy to cause the state space of the reachable graph to be too large.Therefore,a new hazard analysis method for IMA reconfiguration is proposed.It is based on the AADL model of the control process of IMA reconfiguration.The reconfiguration control flow model is transformed into Petri net model,uses a backwards critical state algorithm of Petri net,and the hazards of IMA reconfiguration function are analyzed based on the reachability analysis of Petri net.Analysis results show that,it not only overcomes the weakness of the traditional system function hazards analysis method that is difficult to analysis runtime hazard behavior,but also avoids the state explosion problem brought by the traditional Petri net reachability analysis.Meanwhile,the critical control elements which can cause high-risk status are identified.

Key words: Integrated Modular Avionics(IMA), reconfiguration, Petri net model, hazard analysis, critical state algorithm

摘要: 传统综合模块化航电(IMA)重构危害分析方法是一种静态的系统结构危害分析方法,无法对IMA重构动态的失效情形进行危害分析,经典Petri网的分析方法在进行系统动态运行危害分析时需要生成所有可达图,容易导致可达图的状态空间过大。为此,提出一种新的IMA重构危害分析方法。该方法基于IMA重构控制进程的AADL模型,将重构控制流模型转化为Petri网模型,利用Petri网的向回关键态算法,并基于Petri网的可达性分析方法对IMA重构功能的危害进行分析。分析结果表明,该方法不仅解决了IMA重构动态运行时的危害问题,而且克服了传统Petri网可达性分析带来的状态爆炸,能识别出引起高风险状态的关键控制要素。

关键词: 综合模块化航电, 重构, Petri网模型, 危害分析, 关键态算法

CLC Number: