110 likes | 335 Views
Applying Product-Line Fault Tree Analysis to Build Safer Multi-Agent Systems. Josh Dehlinger, Iowa State University Robyn R. Lutz, Iowa State University & Jet Propulsion Lab ISSRE 2005 Fast Abstract November 8 – 11, 2005
E N D
Applying Product-Line Fault Tree Analysis to Build Safer Multi-Agent Systems Josh Dehlinger, Iowa State University Robyn R. Lutz, Iowa State University & Jet Propulsion Lab ISSRE 2005 Fast Abstract November 8 – 11, 2005 This work was supported by NSF 0204139, NSF 0205588 and by the Iowa Space Grant Consortium
Problem Statement Problem: How can reusable safety analysis techniques be incorporated into agent-oriented software engineering (AOSE)? Problem: How can safety analysis techniques be used to develop more dependable, safe multi-agent systems?
Context • AOSE does not adequately address safety analysis • Some agent-based software systems will be developed that are safety/mission-critical • e.g., satellite constellations (TechSAT21, 3CornerSat, etc.) * Image courtesy of www.nasa.gov/goddard
Addressing Safety • Difficult to adequately capture safety analysis of dynamically changing variation points in multi-agent systems • Ideally want to capture safety analysis in a reusable format • PL-SFTA is a tool-supported approach that addresses both of these issues
Product-Line Engineering • Product Lines • Set of products sharing a common, managed set of variations that satisfy a selected market or mission within a single company • Set of systems that are very similar but with a few key differences (variations)
PL-SFTA of a Multi-Agent System • A fault tree is a directed AND/OR graph that represents contributing causes to a hazard/failure • A PL-SFTA associates the individual variations in a system to the leaf nodes of a fault tree
SFTA Derivation • Create a PL-SFTA in PLFaultCAT • For each role in an agent: • Select the variation points to include in the role for a specific agent • PLFaultCAT will automatically prune the PL-SFTA and provide a product-line member SFTA
Safety Analysis of a Multi-Agent System • Identifying failure points • SFTA allows for easy identification of single-point failures • Allows for the identification of combinations of variation points that frequently contribute to hazards • Performs single point failure identification on PL-SFTA reduces the time of safety analysis
Safety Analysis of a Multi-Agent System • Mitigating failure points • For single-point failures • Introduce new safety requirements into the multi-agent system to prevent single-failures • i.e., turn the OR gates into AND gates in the PL-SFTA • For risky variation point combinations • Introduce dependencies into the product-line multi-agent system • i.e., restricting the selection of risky combinations
Conclusion • Incorporated ideas from safety analysis into multi-agent software engineering • Showed how an existing tool can support PL-SFTA for multi-agent systems • Described how the PL-SFTA can be used to identify and mitigate potential hazards to develop safer, more reliable multi-agent systems