Model checking as a protective method against spurious actuation of industrial control systems

Antti Pakonen; Kim Björkman

doi:10.1201/9781315210469

Model checking as a protective method against spurious actuation of industrial control systems

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

12 Citations (Scopus)

258 Downloads (Pure)

Abstract

A spurious actuation of an industrial Instrumentation and Control (I&C) system is a failure mode where a system component inadvertently performs a function without a justified reason to do so. Design issues leading to such failures are very difficult to analyze, but pose a high risk for safety. Model checking is a formal verification method, that can enable—through exhaustive analysis against stated properties - 100% coverage against spurious actuation scenarios, as well. In this paper, we introduce a modeling approach for the verification of I&C system application logic design. We then discuss the verification of properties related to spurious actuation, in particular. Finally, we present data collected from customer projects VTT has carried out in the Finnish nuclear industry. About 37% of the design issues we have identified are related to spurious actuation, proving that model checking can effectively be used as a protective method against such scenarios.

Original language	English
Title of host publication	Safety and Reliability
Subtitle of host publication	Theory and Applications
Editors	Marko Cepin, Radim Briš
Publisher	CRC Press
Pages	3189-3196
ISBN (Electronic)	978-1-351-80973-3
ISBN (Print)	978-1-138-62937-0
DOIs	https://doi.org/10.1201/9781315210469
Publication status	Published - 1 Jan 2017
MoE publication type	Not Eligible
Event	27th European Safety and Reliability Conference, ESREL 2017 - Portoroz, Slovenia Duration: 18 Jun 2017 → 22 Jun 2017

Conference

Conference	27th European Safety and Reliability Conference, ESREL 2017
Abbreviated title	ESREL 2017
Country/Territory	Slovenia
City	Portoroz
Period	18/06/17 → 22/06/17

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1201/9781315210469

Pakonen_ESREL2017_Accepted_ManuscriptAccepted author manuscript, 326 KB

Cite this

@inproceedings{03454d71b7d148f2ad98e27c6c167f65,

title = "Model checking as a protective method against spurious actuation of industrial control systems",

abstract = "A spurious actuation of an industrial Instrumentation and Control (I\&C) system is a failure mode where a system component inadvertently performs a function without a justified reason to do so. Design issues leading to such failures are very difficult to analyze, but pose a high risk for safety. Model checking is a formal verification method, that can enable—through exhaustive analysis against stated properties - 100\% coverage against spurious actuation scenarios, as well. In this paper, we introduce a modeling approach for the verification of I\&C system application logic design. We then discuss the verification of properties related to spurious actuation, in particular. Finally, we present data collected from customer projects VTT has carried out in the Finnish nuclear industry. About 37\% of the design issues we have identified are related to spurious actuation, proving that model checking can effectively be used as a protective method against such scenarios.",

author = "Antti Pakonen and Kim Bj{\"o}rkman",

note = "Project code: 113347; 27th European Safety and Reliability Conference, ESREL 2017, ESREL 2017 ; Conference date: 18-06-2017 Through 22-06-2017",

year = "2017",

month = jan,

day = "1",

doi = "10.1201/9781315210469",

language = "English",

isbn = "978-1-138-62937-0",

pages = "3189--3196",

editor = "Marko Cepin and Radim Bri{\v s}",

booktitle = "Safety and Reliability",

publisher = "CRC Press",

address = "United States",

}

Model checking as a protective method against spurious actuation of industrial control systems. / Pakonen, Antti; Björkman, Kim.
Safety and Reliability: Theory and Applications. ed. / Marko Cepin; Radim Briš. CRC Press, 2017. p. 3189-3196.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Model checking as a protective method against spurious actuation of industrial control systems

AU - Pakonen, Antti

AU - Björkman, Kim

N1 - Project code: 113347

PY - 2017/1/1

Y1 - 2017/1/1

N2 - A spurious actuation of an industrial Instrumentation and Control (I&C) system is a failure mode where a system component inadvertently performs a function without a justified reason to do so. Design issues leading to such failures are very difficult to analyze, but pose a high risk for safety. Model checking is a formal verification method, that can enable—through exhaustive analysis against stated properties - 100% coverage against spurious actuation scenarios, as well. In this paper, we introduce a modeling approach for the verification of I&C system application logic design. We then discuss the verification of properties related to spurious actuation, in particular. Finally, we present data collected from customer projects VTT has carried out in the Finnish nuclear industry. About 37% of the design issues we have identified are related to spurious actuation, proving that model checking can effectively be used as a protective method against such scenarios.

AB - A spurious actuation of an industrial Instrumentation and Control (I&C) system is a failure mode where a system component inadvertently performs a function without a justified reason to do so. Design issues leading to such failures are very difficult to analyze, but pose a high risk for safety. Model checking is a formal verification method, that can enable—through exhaustive analysis against stated properties - 100% coverage against spurious actuation scenarios, as well. In this paper, we introduce a modeling approach for the verification of I&C system application logic design. We then discuss the verification of properties related to spurious actuation, in particular. Finally, we present data collected from customer projects VTT has carried out in the Finnish nuclear industry. About 37% of the design issues we have identified are related to spurious actuation, proving that model checking can effectively be used as a protective method against such scenarios.

UR - https://www.scopus.com/pages/publications/85047805069

U2 - 10.1201/9781315210469

DO - 10.1201/9781315210469

M3 - Conference article in proceedings

SN - 978-1-138-62937-0

SP - 3189

EP - 3196

BT - Safety and Reliability

A2 - Cepin, Marko

A2 - Briš, Radim

PB - CRC Press

T2 - 27th European Safety and Reliability Conference, ESREL 2017

Y2 - 18 June 2017 through 22 June 2017

ER -

Model checking as a protective method against spurious actuation of industrial control systems

Abstract

Conference

UN SDGs

Access to Document

Other files and links

Fingerprint

SAUNA: Integrated safety assessment and justification of nuclear power plant automation

Cite this

Model checking as a protective method against spurious actuation of industrial control systems

Abstract

Conference

UN SDGs

Access to Document

Other files and links

Fingerprint

Projects

SAUNA: Integrated safety assessment and justification of nuclear power plant automation

Cite this