Identifying Run-time Monitoring Requirements for Autonomous Systems through the Analysis of Safety Arguments

Richard David Hawkins; Philippa Mary Ryan Conmy

Identifying Run-time Monitoring Requirements for Autonomous Systems through the Analysis of Safety Arguments

Richard David Hawkins, Philippa Mary Ryan Conmy

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

It is crucial that safety assurance continues to be managed for autonomous systems (AS) throughout their operation. This can be particularly challenging where AS operate in complex and dynamic environments. The importance of effective safety monitoring in ensuring the safety of AS through-life is already well documented. These current approaches often rely on utilising monitored information that happens to be available, or are reliant solely on engineering judgement to determine the requirements. Instead, we propose to use a systematic analysis of the safety case as the basis for determining the run-time monitoring requirements.
Safety cases are created for AS prior to deployment in order to demonstrate
why they are believed to be sufficiently safe to go into operation. The safety
case is therefore inevitably based upon predictions and assumptions about the system and its operation which may become untrue due to changes post-deployment. Our approach identifies specific run-time monitoring requirements for AS based upon a dialectic analysis of the safety case developed for the system. The advantage of the approach described is that it is systematic (through explicit consideration of elements of the safety case for the AS) and provides a way to justify the sufficiency of the resulting monitoring requirements (through creating explicit links the safety claims
made about the AS).

Original language	English
Title of host publication	SAFECOMP 2023 (42nd International Conference on Computer Safety, Reliability and Security)
Publication status	Published - 22 Sept 2023
Event	International Conference on Computer Safety, Reliability and Security - Toulouse, France Duration: 20 Sept 2023 → 22 Sept 2023 Conference number: 42nd

Conference

Conference	International Conference on Computer Safety, Reliability and Security
Abbreviated title	SAFECOMP 2023
Country/Territory	France
City	Toulouse
Period	20/09/23 → 22/09/23

Bibliographical note

This is an author-produced version of the published paper. Uploaded in accordance with the University’s Research Publications and Open Access policy.

Access to Document

HawkinsSafecomp23_final
This is an author-produced version of the published paper. Uploaded in accordance with the University’s Research Publications and Open Access policy.
Accepted author manuscript, 929 KBLicence: CC BY

Cite this

@inproceedings{8d7d0e414ba24a39b2bbebfe4d1c4e52,

title = "Identifying Run-time Monitoring Requirements for Autonomous Systems through the Analysis of Safety Arguments",

abstract = "It is crucial that safety assurance continues to be managed for autonomous systems (AS) throughout their operation. This can be particularly challenging where AS operate in complex and dynamic environments. The importance of effective safety monitoring in ensuring the safety of AS through-life is already well documented. These current approaches often rely on utilising monitored information that happens to be available, or are reliant solely on engineering judgement to determine the requirements. Instead, we propose to use a systematic analysis of the safety case as the basis for determining the run-time monitoring requirements.Safety cases are created for AS prior to deployment in order to demonstratewhy they are believed to be sufficiently safe to go into operation. The safetycase is therefore inevitably based upon predictions and assumptions about the system and its operation which may become untrue due to changes post-deployment. Our approach identifies specific run-time monitoring requirements for AS based upon a dialectic analysis of the safety case developed for the system. The advantage of the approach described is that it is systematic (through explicit consideration of elements of the safety case for the AS) and provides a way to justify the sufficiency of the resulting monitoring requirements (through creating explicit links the safety claimsmade about the AS). ",

author = "Hawkins, {Richard David} and {Ryan Conmy}, {Philippa Mary}",

note = "This is an author-produced version of the published paper. Uploaded in accordance with the University{\textquoteright}s Research Publications and Open Access policy.; International Conference on Computer Safety, Reliability and Security, SAFECOMP 2023 ; Conference date: 20-09-2023 Through 22-09-2023",

year = "2023",

month = sep,

day = "22",

language = "English",

booktitle = "SAFECOMP 2023 (42nd International Conference on Computer Safety, Reliability and Security)",

}

TY - GEN

T1 - Identifying Run-time Monitoring Requirements for Autonomous Systems through the Analysis of Safety Arguments

AU - Hawkins, Richard David

AU - Ryan Conmy, Philippa Mary

N1 - Conference code: 42nd

PY - 2023/9/22

Y1 - 2023/9/22

N2 - It is crucial that safety assurance continues to be managed for autonomous systems (AS) throughout their operation. This can be particularly challenging where AS operate in complex and dynamic environments. The importance of effective safety monitoring in ensuring the safety of AS through-life is already well documented. These current approaches often rely on utilising monitored information that happens to be available, or are reliant solely on engineering judgement to determine the requirements. Instead, we propose to use a systematic analysis of the safety case as the basis for determining the run-time monitoring requirements.Safety cases are created for AS prior to deployment in order to demonstratewhy they are believed to be sufficiently safe to go into operation. The safetycase is therefore inevitably based upon predictions and assumptions about the system and its operation which may become untrue due to changes post-deployment. Our approach identifies specific run-time monitoring requirements for AS based upon a dialectic analysis of the safety case developed for the system. The advantage of the approach described is that it is systematic (through explicit consideration of elements of the safety case for the AS) and provides a way to justify the sufficiency of the resulting monitoring requirements (through creating explicit links the safety claimsmade about the AS).

AB - It is crucial that safety assurance continues to be managed for autonomous systems (AS) throughout their operation. This can be particularly challenging where AS operate in complex and dynamic environments. The importance of effective safety monitoring in ensuring the safety of AS through-life is already well documented. These current approaches often rely on utilising monitored information that happens to be available, or are reliant solely on engineering judgement to determine the requirements. Instead, we propose to use a systematic analysis of the safety case as the basis for determining the run-time monitoring requirements.Safety cases are created for AS prior to deployment in order to demonstratewhy they are believed to be sufficiently safe to go into operation. The safetycase is therefore inevitably based upon predictions and assumptions about the system and its operation which may become untrue due to changes post-deployment. Our approach identifies specific run-time monitoring requirements for AS based upon a dialectic analysis of the safety case developed for the system. The advantage of the approach described is that it is systematic (through explicit consideration of elements of the safety case for the AS) and provides a way to justify the sufficiency of the resulting monitoring requirements (through creating explicit links the safety claimsmade about the AS).

M3 - Conference contribution

BT - SAFECOMP 2023 (42nd International Conference on Computer Safety, Reliability and Security)

T2 - International Conference on Computer Safety, Reliability and Security

Y2 - 20 September 2023 through 22 September 2023

ER -