Abstract
Systems cannot usually be proved safe unless some failure assumptions are made. Here we prove that the water level in a generic boiler system is always within its safe range by assuming that device failures result in inconsistent readings. Key parts of our approach are a failure-reporting strategy that determines failures from consistency conditions, and a level-calculation strategy that gives a best estimate of boiler level in light of the reported failures. These strategies are generic and could be used in other safety-critical applications.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
T. Anderson and P.A. Lee, editors. Fault Tolerance: Principles and Practice. Prentice Hall, 1981.
Flaviu Cristian. A rigorous approach to fault-tolerant programming. IEEE Transactions on Software Engineering, SE-11(1), January 1985.
Specification for a software program for a boiler water content monitor and control system. Institute for Risk Research, 1992.
Leslie Lamport. The temporal logic of actions. Technical Report 79, Digital Systems Research Center, 1991.
B. Randall. System structure for software fault tolerance. IEEE Transactions on Software Engineering, SE1(2), 1975.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 1995 Springer-Verlag/Wien
About this paper
Cite this paper
Bruns, G., Anderson, S. (1995). Using Data Consistency Assumptions to Show System Safety. In: Cristian, F., Le Lann, G., Lunt, T. (eds) Dependable Computing for Critical Applications 4. Dependable Computing and Fault-Tolerant Systems, vol 9. Springer, Vienna. https://doi.org/10.1007/978-3-7091-9396-9_2
Download citation
DOI: https://doi.org/10.1007/978-3-7091-9396-9_2
Publisher Name: Springer, Vienna
Print ISBN: 978-3-7091-9398-3
Online ISBN: 978-3-7091-9396-9
eBook Packages: Springer Book Archive