On STPA for Distributed Development of Safe Autonomous Driving: An Interview Study (2403.09509v1)
Abstract: Safety analysis is used to identify hazards and build knowledge during the design phase of safety-relevant functions. This is especially true for complex AI-enabled and software intensive systems such as Autonomous Drive (AD). System-Theoretic Process Analysis (STPA) is a novel method applied in safety-related fields like defense and aerospace, which is also becoming popular in the automotive industry. However, STPA assumes prerequisites that are not fully valid in the automotive system engineering with distributed system development and multi-abstraction design levels. This would inhibit software developers from using STPA to analyze their software as part of a bigger system, resulting in a lack of traceability. This can be seen as a maintainability challenge in continuous development and deployment (DevOps). In this paper, STPA's different guidelines for the automotive industry, e.g. J31887/ISO21448/STPA handbook, are firstly compared to assess their applicability to the distributed development of complex AI-enabled systems like AD. Further, an approach to overcome the challenges of using STPA in a multi-level design context is proposed. By conducting an interview study with automotive industry experts for the development of AD, the challenges are validated and the effectiveness of the proposed approach is evaluated.
- A. Nouri, C. Berger, and F. Törner, “An Industrial Experience Report about Challenges from Continuous Monitoring, Improvement, and Deployment for Autonomous Driving Features,” in Proceedings of the 48th Euromicro Conference on Software Engineering and Advanced Applications (SEAA), (Maspalomas, Gran Canaria, Spain), pp. 358–365, Aug 2022.
- “ISO/FDIS 21448, Road vehicles — Safety Of The Intended Functionality,” Standard, International Organization for Standardization, 2022.
- F. S. Committee, “System Theoretic Process Analysis (STPA) Recommended Practices for Evaluations of Automotive Related Safety-Critical Systems.” https://doi.org/10.4271/J3187_202202, Feb. 2022.
- “ISO 26262:2018 (all parts), Road vehicles — Functional safety,” Standard, International Organization for Standardization, 2018.
- UNECE, “UN Regulation No. 157 - Automated Lane Keeping Systems (ALKS).” https://unece.org/transport/documents/2021/03/standards/un-regulation-no-157-automated-lane-keeping-systems-alks, 2021.
- G. Koelln, M. Klicker, and S. Schmidt, “Comparison of the Results of the System Theoretic Process Analysis for a Vehicle SAE Level four and five,” in Proceedings of the IEEE 23rd International Conference on Intelligent Transportation Systems (ITSC), (Rhodes, Greece), pp. 1–6, Sep. 2020.
- E. Acar Celik, C. Cârlan, A. Abdulkhaleq, F. Bauer, M. Schels, and H. J. Putzer, “Application Of STPA For The Elicitation Of Safety Requirements For A Machine Learning-Based Perception Component In Automotive,” in Computer Safety, Reliability, and Security: 41st International Conference, SAFECOMP, Munich, Germany, September 6–9, 2022, Proceedings, (Berlin, Heidelberg), p. 319–332, Springer-Verlag, 2022.
- A. Abdulkhaleq, S. Wagner, and N. Leveson, “A Comprehensive Safety Engineering Approach for Software-Intensive Systems Based on STPA,” In proceedings of the 3rd European STAMP Workshop 5-6 October 2015, Amsterdam, pp. 2–11, 2015.
- A. Abdulkhaleq, D. Lammering, S. Wagner, J. Röder, N. Balbierer, L. Ramsauer, T. Raste, and H. Boehmert, “A Systematic Approach Based on STPA for Developing a Dependable Architecture for Fully Automated Driving Vehicles,” 4th European STAMP Workshop 2016, ESW 2016, 13-15 September 2016, Zurich, Switzerland, pp. 41–51, 2017.
- V. Nguyen Tran, L. Vu Tran, V. Nguyen Tran, and D. Ngoc Vu, “Hazard Analysis Methods for Software Safety Requirements Engineering,” in Proceedings of The 5th International Conference on Software Engineering and Information Management (ICSIM), ICSIM 2022, (New York, NY, USA), p. 11–18, Association for Computing Machinery, 2022.
- A. Mallya, V. Pantelic, M. Adedjouma, M. Lawford, and A. Wassyng, “Using STPA in an ISO 26262 Compliant Process,” in Computer Safety, Reliability, and Security - 35th International Conference, SAFECOMP 2016, Trondheim, Norway, September 21-23, 2016, Proceedings, vol. 9922 of Lecture Notes in Computer Science, pp. 117–129, Springer, 2016.
- N. G. Leveson and J. Thomas, “STPA Handbook, Mar. 2018,” http://psas.scripts.mit.edu/home/materials.
- C. J. Becker, J. C. Brewer, and L. J. Yount, “Safety of the intended functionality of lane-centering and lane-changing maneuvers of a generic level 3 highway chauffeur system (Report No. DOT HS 812 879),” in National Highway Traffic Safety Administration, 2020.
- P. E. Strandberg, “Ethical Interviews in Software Engineering,” in Proceedings of the ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM), (Porto de Galinhas, Brazil), pp. 1–11, 2019.
- I. Bate and T. Kelly, “Architectural Considerations in the Certification of Modular Systems,” in Computer Safety, Reliability and Security (S. Anderson, M. Felici, and S. Bologna, eds.), pp. 321–333, 2002.
- National Highway Traffic Safety Administration, “Collision Between Vehicle Controlled by Developmental Automated Driving System and Pedestrian,” in Accident Report NTSB/HAR-19/03 PB2019-101402, 2019.
- Ali Nouri (10 papers)
- Christian Berger (77 papers)
- Fredrik Törner (5 papers)