Gao Guoliang Safety Assurance Department

1. How to Improve the Safety of Signalling Systems with a Shortened Construction Period in Engineering Construction Projects Gao Guoliang Safety Assurance Department Beijing National Railway Design and Research Institute of Signal and Communication Co. Ltd.

2. Agenda Great challenge and why? Feasible solutions • Technique measures • Overall design • Risk analysis • Process&Tools measures • Agile development practice • Utilization of automation tools Conclusion

3. Great challenge and why? Reality A shortened construction period for a signalling system Social Influence Small proportion share of budget Restriction and limitation from other systems Challenge Systematic process could be broke, and become disordered

4. Feasible solutions Removal the causes • Social Influence • Small share • R&L from Other systems -------- very difficult -------- poor results Mitigation their impacts • Focus the key and important tasks • Technique measures • Management measures

5. Technique measures——Overall Design • Special Attention to Overall Design • avoid its random modification • sufficient consideration to the interactions and mutual influences • strict change control • Minimization of Modification of Equipmentsexisted • equipments existed pose restrictions and limitations to overall system design • overall system design may necessitate change requests for them

6. Technique measures——Risk Analysis • Effective and efficient risk analysis is the key to improving efficiency and safety. • Risk Analysis Based Approach • Joint efforts and involve stakeholders • Share hazard log • Qualitative Risk Analysis • Retrospective Risk Analysis against NCRs

7. Process measures——Agile practices • Iteration development • Continuous Integration • Test-driven Development

8. Process measures——Iteration development Incremental iteration development has the advantages of early verification and feedback of requirements to allow timely adjustment of both the direction and the focus of development during the next iteration and prioritize the release of the most important parts.

9. Process measures——Continuous Integration • Traditional integration • very difficult and risky • exponentially more risky with time • masks a large set of bugs • Continuous integration • frequent integration for small changes • a clean build, full integration, and running all tests • a fully working system—that is compiling, deploying, and testing— and not just a successful compile. • Continuous Integration reduces time to market and increasing quality to market by finding Integration bugs often and early. • Continuous Integration also increases visibility of the progress of the project by making it explicit to the development team and stakeholders.

10. Process measures——Test-driven Development • a rapid cycle of testing, coding, and refactoring • test-first development • test and refactoring • baby steps • Test first focus on the interfaces and behaviours than implementation. • The tests act as living documentation of the code, and will be run with each build for Continuous integration.

11. Process measures——Test-driven Development • TDD uses an approach similar to double-entry bookkeeping. • It’s theoretically possible for the test and code to both be wrong in exactly the same way, thereby making it seem like everything’s OK when it’s not. • Pair Programming can be used to mitigate the risk, as Pair Programming could achieve synchronizing verification on codes by the way.

12. Tools measures——Automation testing tools • Supporting tools to Agile development • unit testing tools (e.g. CppUnit) • building tools (e.g. Maven, Ant) • continuous integration tools (e.g. CruiseControl and Hudson) • Function testing tools • Developed specially • Integration testing tools for large signalling systems The effective utilization of can bring about considerable reduction of feedback time and improvement of work efficiency.

13. Tools measures——Automatic Data Generation and Verification Tools • Input and verification of massive engineering data is not possible by manual means, it is essential to apply automatic data generation and verification tools. • these tools belong to the category of tool class T3, require extensive tests supplemented by manual check if necessary, as well as ergodicity tests during subsequent system tests, to minimize data errors caused by these tools.

14. CONCLUSION Faced with shortened construction period, supplies of signalling systems encounter the great challenge of improving the safety of signalling systems while meeting the requirements of employers. In this case, strict compliance with the requirements of the lifecycle specified in EN 50126: 1999 may have practical difficulties in producing favourable results. It is up to suppliers of signalling systems to adopt appropriate response measures to pay special attention to the key links and exercise control over the greatest risks. The measures for solving technical problems from the perspective of overall system design and risk analysis and for solving process problems from the perspective of agile development and automation tool utilization so as to maximize the safety of signalling systems under the precondition of improvement of efficiency.

15. Thank you for your attention! Contact Details: Tel: +86 1051865172 Fax: +86 1051846162 Email: 0225ggl@crscd.com.cn