{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,2]],"date-time":"2025-03-02T05:10:06Z","timestamp":1740892206510,"version":"3.38.0"},"reference-count":53,"publisher":"Wiley","issue":"11","license":[{"start":{"date-parts":[[2011,1,24]],"date-time":"2011-01-24T00:00:00Z","timestamp":1295827200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Softw Pract Exp"],"published-print":{"date-parts":[[2011,10]]},"abstract":"Abstract<\/jats:title>New processes for the design of dependable systems must address both cost and dependability concerns. They should also maximize the potential for automation to address the problem of increasing technological complexity and the potentially immense design spaces that need to be explored. In this paper we show a design process that integrates system modelling, automated dependability analysis and evolutionary optimization techniques to achieve the optimization of designs with respect to dependability and cost from the early stages. Computerized support is provided for difficult aspects of fault tolerant design, such as decision making on the type and location of fault detection and fault tolerant strategies. The process is supported by HiP\u2010HOPS, a scalable automated dependability analysis and optimization tool. The process was applied to a Pre\u2010collision system for vehicles at an early stage of its design. The study shows that HiP\u2010HOPS can overcome the limitations of earlier work based on Reliability Block Diagrams by enabling dependability analysis and optimization of architectures that may have a network topology and exhibit multiple failure modes. Copyright \u00a9 2011 John Wiley & Sons, Ltd.<\/jats:p>","DOI":"10.1002\/spe.1044","type":"journal-article","created":{"date-parts":[[2011,1,25]],"date-time":"2011-01-25T02:27:29Z","timestamp":1295922449000},"page":"1303-1327","source":"Crossref","is-referenced-by-count":31,"title":["An approach to optimization of fault tolerant architectures using HiP\u2010HOPS"],"prefix":"10.1002","volume":"41","author":[{"given":"Masakazu","family":"Adachi","sequence":"first","affiliation":[]},{"given":"Yiannis","family":"Papadopoulos","sequence":"additional","affiliation":[]},{"given":"Septavera","family":"Sharvia","sequence":"additional","affiliation":[]},{"given":"David","family":"Parker","sequence":"additional","affiliation":[]},{"given":"Tetsuya","family":"Tohdo","sequence":"additional","affiliation":[]}],"member":"311","published-online":{"date-parts":[[2011,1,24]]},"reference":[{"key":"e_1_2_9_2_2","doi-asserted-by":"crossref","unstructured":"LittlefieldLJ ViswanathanR.Advancing open standards in integrated modular avionics: An industry analysis. 26th Digital Avionics Systems Conference (DASC). Dallas 2007;2.B.1\u20101\u20132.B.1\u201014.","DOI":"10.1109\/DASC.2007.4391848"},{"key":"e_1_2_9_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2009.2039550"},{"key":"e_1_2_9_4_2","unstructured":"UML Resource page. Available at:http:\/\/www.uml.org[29 May2010]."},{"key":"e_1_2_9_5_2","unstructured":"SysML Open source specification project. Available at:http:\/\/www.sysml.org[29 May2010]."},{"key":"e_1_2_9_6_2","doi-asserted-by":"crossref","unstructured":"FeilerPH GluchDP HudakJJ.The Architecture Analysis and Design Language (AADL): An introduction. Technical Report 2006; CMU\/SEI\u20102006\u2010TN\u2010011.","DOI":"10.21236\/ADA455842"},{"key":"e_1_2_9_7_2","doi-asserted-by":"publisher","DOI":"10.1007\/978\u20103\u2010540\u201074035\u20103_3"},{"key":"e_1_2_9_8_2","doi-asserted-by":"publisher","DOI":"10.1016\/S0951\u20108320(00)00076\u20104"},{"key":"e_1_2_9_9_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87698-4_9"},{"key":"e_1_2_9_10_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ress.2005.11.018"},{"key":"e_1_2_9_11_2","doi-asserted-by":"crossref","unstructured":"DebK AgrawalS PratapA MeyarivanT.A fast elitist non\u2010dominated sorting genetic algorithm for multi\u2010objective optimization: NSGA\u2010II. KanGAL Report No. 200001 Indian Institute of Technology Kanpu India 2000.","DOI":"10.1007\/3-540-45356-3_83"},{"key":"e_1_2_9_12_2","doi-asserted-by":"crossref","unstructured":"GrunskeL.Identifying \u2018Good\u2019 architectural design alternatives with multi\u2010objective optimization strategies. International Conference on Software Engineering (ICSE) Emerging Results Shanghai 2006;849\u2013852. ACM 1\u201059593\u2010085\u2010X\/06\/0005.","DOI":"10.1145\/1134285.1134431"},{"key":"e_1_2_9_13_2","doi-asserted-by":"publisher","DOI":"10.1007\/978\u20103\u2010540\u201074035\u20103_9"},{"key":"e_1_2_9_14_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2004.06.027"},{"key":"e_1_2_9_15_2","doi-asserted-by":"publisher","DOI":"10.1016\/B978-008044654-7\/50175-8"},{"issue":"14","key":"e_1_2_9_16_2","first-page":"403","article-title":"Reliability optimization of series\u2010parallel systems using asynchronous heterogeneous hierarchical parallel genetic algorithms","volume":"4","author":"Zeng W","year":"2007","journal-title":"Journal of Mind and Computation"},{"key":"e_1_2_9_17_2","doi-asserted-by":"crossref","unstructured":"SharviaS PapadopoulosY.Non\u2010coherent modelling in compositional safety analysis. Proceedings of 17th World Congress International Federation of Automatic Control Seoul 2008;4138\u20134143.","DOI":"10.3182\/20080706-5-KR-1001.00696"},{"key":"e_1_2_9_18_2","doi-asserted-by":"publisher","DOI":"10.1007\/3\u2010540\u201048249\u20100_13"},{"volume-title":"Software Fault Tolerance","year":"1995","author":"Lyu MR","key":"e_1_2_9_19_2"},{"key":"e_1_2_9_20_2","unstructured":"Torres\u2010PomalesW.Software fault tolerance: A tutorial. NASA\/TM\u20102000\u2010210616 2000."},{"issue":"3","key":"e_1_2_9_21_2","first-page":"159","article-title":"On version state recovery and adjudication in class diversity","volume":"17","author":"Romanovsky A","year":"2002","journal-title":"International Journal of Computer Systems Science and Engineering"},{"key":"e_1_2_9_22_2","unstructured":"LimingC AvizienisA.N\u2010Version programming: A fault\u2010tolerant approach to reliability of software operation. The 25th International Symposium on Fault\u2010Tolerant Computing Highlights from 25 Years Pasadena CA 1995;113\u2013119."},{"key":"e_1_2_9_23_2","doi-asserted-by":"crossref","unstructured":"AvizienisA LyuMR SchutzW.In search of effective diversity: A six\u2010language study of fault\u2010tolerant control software. Technical Report CSD\u2010870060 UCLA 1987.","DOI":"10.1109\/FTCS.1988.5291"},{"key":"e_1_2_9_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1986.6312924"},{"key":"e_1_2_9_25_2","doi-asserted-by":"crossref","unstructured":"PapadopoulosY McDermidJ MavridesA ScheidlerC MaruhnM.Model\u2010based semiautomatic safety analysis of programmable systems in automotive applications. International Conference on Advanced Driver Assistance Systems (ADAS 2001) Birmingham U.K. 2001;53\u201357.","DOI":"10.1049\/cp:20010498"},{"key":"e_1_2_9_26_2","doi-asserted-by":"crossref","unstructured":"PapadopoulosY MaruhnM.Model\u2010based synthesis of fault trees from matlab\u2010simulink models. International Conference on Dependable Systems and Networks (DSN) G\u00f6teborg Sweden 2001;77\u201382.","DOI":"10.1109\/DSN.2001.941393"},{"key":"e_1_2_9_27_2","unstructured":"PumfreyDJ.The principled design of computer system safety analyses. DPhil Thesis University of York 1986."},{"key":"e_1_2_9_28_2","unstructured":"BondavalliA SimonciniL.Failure classification with respect to detection. Esprit Project Nr 3092 (PDCS: Predictably Dependable Computing Systems) 1990."},{"key":"e_1_2_9_29_2","doi-asserted-by":"crossref","unstructured":"LutzRR Yin ShawH.Applying adaptive safety analysis techniques. Proceedings of the 10th International Symposium on Software Reliability Engineering Boca Raton FL 1999;42\u201349.","DOI":"10.1109\/ISSRE.1999.809309"},{"key":"e_1_2_9_30_2","doi-asserted-by":"crossref","unstructured":"GoddardPL.Software FMEA techniques. Proceedings of Annual Reliability and Maintainability Symposium Los Angeles CA 2000;118\u2013123.","DOI":"10.1109\/RAMS.2000.816294"},{"key":"e_1_2_9_31_2","unstructured":"RistordL EsmenjaudC.FMEA performed on the SPINLINE3 operational system software as part of the TIHANGE1 NIS refurbishment safety case. CNRA\/CSNI Workshop on Licensing and Operating Experience of Computer\u2010Based I&C Systems Hluboka nad Vltavou Czech Republic 2002;37\u201350."},{"key":"e_1_2_9_32_2","unstructured":"HaapanenP HelminenA.Failure mode and effects analysis of software\u2010based automation systems. Radiation and Nuclear Safety Authority STUK\u2010YTO\u2010TR 190 2002."},{"key":"e_1_2_9_33_2","doi-asserted-by":"publisher","DOI":"10.2307\/2346781"},{"key":"e_1_2_9_34_2","first-page":"16","volume-title":"Non\u2010Coherent Structure Theory: A Review and its Role in Fault Tree Analysis","author":"Johston BD","year":"1983"},{"key":"e_1_2_9_35_2","doi-asserted-by":"publisher","DOI":"10.1145\/381766.381770"},{"key":"e_1_2_9_36_2","doi-asserted-by":"publisher","DOI":"10.4271\/2009-01-0738"},{"key":"e_1_2_9_37_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.conengprac.2008.10.003"},{"key":"e_1_2_9_38_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2005.02.051"},{"key":"e_1_2_9_39_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2006.08.014"},{"key":"e_1_2_9_40_2","doi-asserted-by":"crossref","unstructured":"GrunskeL KaiserB PapadopoulosY.Model\u2010driven safety evaluation with state event based component failure annotations. Proceedings of the Eighth International Symposium on Component Based Software Engineering (CBSE 2005) St. Louis MO 2005;33\u201348. DOI:10.1007\/11424529_3.","DOI":"10.1007\/11424529_3"},{"volume-title":"DSN Workshop on Architecting Dependable Systems","year":"2007","author":"Joshi A","key":"e_1_2_9_41_2"},{"key":"e_1_2_9_42_2","unstructured":"FeilerPH RuginaAE.Dependability modelling with the architecture Analysis and Design Language (AADL). Technical Report CMU\/SEI\u20102007\u2010TN\u2010043 2007."},{"issue":"2","key":"e_1_2_9_43_2","doi-asserted-by":"crossref","first-page":"109","DOI":"10.3233\/FI-1999-402302","article-title":"The Altarica formalism for describing concurrent systems","volume":"40","author":"Arnold A","year":"1999","journal-title":"Fundamenta Informaticae"},{"key":"e_1_2_9_44_2","unstructured":"BieberP BougnolC CastelC HeckmannJP KehrenC MetgeS SeguinC.Safety assessment with Altarica. IFIP Congress Topical Sessions Toulouse France 2004;505\u2013510."},{"volume-title":"ECAI","year":"2006","author":"Bozzano M","key":"e_1_2_9_45_2"},{"volume-title":"ECAI","year":"2006","author":"Bozzano M","key":"e_1_2_9_46_2"},{"key":"e_1_2_9_47_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10515-005-2642-x"},{"key":"e_1_2_9_48_2","doi-asserted-by":"crossref","first-page":"250","DOI":"10.1145\/253228.253281","volume-title":"Proceedings of the 19th International Conference on Software Engineering","author":"Reese JD","year":"1997"},{"key":"e_1_2_9_49_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75101-4_44"},{"key":"e_1_2_9_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/QEST.2007.18"},{"key":"e_1_2_9_51_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.conengprac.2006.07.003"},{"key":"e_1_2_9_52_2","unstructured":"HamannR UhligA PapadopoulosY R\u00fcdeE Gr\u00e4tzU LienR.Derivation or ship system safety criteria by means of risk\u2010based ship system safety analysis. ASME 27th International Conference on Offshore Mechanics and Arctic Engineering (OMAE'08) Estoril Portugal June 2008."},{"key":"e_1_2_9_53_2","doi-asserted-by":"publisher","DOI":"10.1016\/S0951-8320(02)00042-X"},{"key":"e_1_2_9_54_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45236-2_13"}],"container-title":["Software: Practice and Experience"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fspe.1044","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/spe.1044","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,2]],"date-time":"2025-03-02T03:59:39Z","timestamp":1740887979000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1002\/spe.1044"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,1,24]]},"references-count":53,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2011,10]]}},"alternative-id":["10.1002\/spe.1044"],"URL":"https:\/\/doi.org\/10.1002\/spe.1044","archive":["Portico"],"relation":{},"ISSN":["0038-0644","1097-024X"],"issn-type":[{"type":"print","value":"0038-0644"},{"type":"electronic","value":"1097-024X"}],"subject":[],"published":{"date-parts":[[2011,1,24]]}}}