sample_safety_analysis

Overview

Failure Mode

Guideword

ASIL

Interface

SampleFailureMode

B

safety_software_seooc_example.SampleLibraryAPI.GetNumber

SampleFailureMode2

D

safety_software_seooc_example.SampleLibraryAPI.GetNumber

Failure Modes

SampleLibrary.SampleFailureMode

ASIL B

Interface

safety_software_seooc_example.SampleLibraryAPI.GetNumber

Failure Effect

The world as we know it will end

Description

SampleFailureMode takes over the world

Root Causes

Just bad luck

Source: sample_fta.puml, line 25

JustBadLuck Mitigation ASIL B

Sometimes, the dark side wins. We shall be prepared for that.

No More Coffee

Source: sample_fta.puml, line 31

NoMoreCoffee Mitigation ASIL B

We shall keep a coffee reserve for emergencies

No More Cookies

Source: sample_fta.puml, line 30

NoMoreCookies Mitigation ASIL B

We shall only order family size cookie jars

Shared memory segment created with the wrong name

Source: sample_fta.puml, line 26

SampleAoU Assumption of Use ASIL B

It shall be made sure that shared memory segments are never created with the wrong name (ShmemCreatedWrongName)

SampleLibrary.SampleFailureMode2

ASIL D

Interface

safety_software_seooc_example.SampleLibraryAPI.GetNumber

Failure Effect

Downstream consumers time out

Description

SampleFailureMode2 responds too late

Root Causes

Deadline monitor

Source: sample_fta2.puml, line 25

DeadlineMonitor Mitigation ASIL D

Per-request deadline monitoring shall flag late responses

Watchdog timer

Source: sample_fta2.puml, line 24

WatchdogTimer Mitigation ASIL D

A watchdog shall detect overruns and force a safe state

Fault Trees

sample_fta.puml

sample_fta2.puml

Safety Measures

SampleAoU Assumption of Use ASIL B

It shall be made sure that shared memory segments are never created with the wrong name (ShmemCreatedWrongName)

JustBadLuck Mitigation ASIL B

Sometimes, the dark side wins. We shall be prepared for that.

NoMoreCookies Mitigation ASIL B

We shall only order family size cookie jars

NoMoreCoffee Mitigation ASIL B

We shall keep a coffee reserve for emergencies

WatchdogTimer Mitigation ASIL D

A watchdog shall detect overruns and force a safe state

DeadlineMonitor Mitigation ASIL D

Per-request deadline monitoring shall flag late responses