• The KIPS Transactions:PartA
• /
• v.15A no.6
• /
• pp.309-316
• /
• 2008

The mission-critical engagement control computer for air defense has to maintain its operation without any fault for a long mission time. The mission performed by large-scale and complex embedded software is extremely critical in terms of dependability and safety of computer system, and it is very important that engagement control computer has high reliability. The engagement control computer was implemented using four processors. The distributed computer composed of four processors quarantees the dependability and safety, and ASR fault-tolerant technique applied to each processor guarantees the reliability. In this paper, the mechanism and performance of ASR fault-tolerant technique are analysed. And MTBF, reliability, availability, and cost-effectiveness for ASR, DMR and TMR techniques applied to the engagement control computer are analysed. The mission-critical engagement control computer using software-based ASR fault-tolerant technique provides high reliability and fast recovery time at a low cost. The mission reliability of the engagement control computer using ASR technique in 4 processors board is almost same the reliability of the computer using TMR technique in 6 processors board. ASR technique is most suitable to the mission-critical engagement control computer.

• Proceedings of the Korean Nuclear Society Conference
• /
• 1998.05a
• /
• pp.285-290
• /
• 1998

본 논문은 David Harel이 제안한 Statechart based Formalism과 Statemate MAGNUM toolset을 이용하여 월성 원전 2/3/4호기 증기발생기 수위로 인한 원자로 정지를 activity chart 및 Statechart로 모델링하고 K&R C 코드를 자동으로 생산하였다. 이는 종전의 몇몇 소프트웨어 전문가에 의해서 개발될 수 밖에 없었던 원전 필수만전(Safety-critical) 소프트웨어를 정형화된 Computer Aided Software Engineering 도구를 활용하여 소프트웨어 생명주기중 요구사양명세 및 설계까지만 수행하고 그 이하는 모두 자동으로 생산하는 소프트웨어 공학의 핵심기술을 연구한 것이다. 자동으로 생산된 K&R C 코드는 품질이 우수하고 생산성이 높으며 이식성이 뛰어남을 확인할 수 있었다.

• Review of KIISC
• /
• v.25 no.1
• /
• pp.39-46
• /
• 2015

현대의 자동차는 안전중요(Safety Critical) 시스템이기 때문에 차량의 안전성을 보장하는 것은 물론 초 연결사회를 지향하는 사물인터넷 기술의 발전과 자동차의 스마트화 됨에 따른 자동차 보안문제가 대두됨에 따라 자동차 소프트웨어와 공급망에서의 보증 방안이 필요하다. 본 논문에서는 자동차 소프트웨어의 보안성을 확보하고, 공급망에서의 보안성을 보증하기 위한 자동차 소프트웨어&공급망 보증(A-SSCA, Automotive-Software& Supply Chain Assurance)을 위한 보안쟁점 및 고려사항을 제시하고자 한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2018.05a
• /
• pp.229-231
• /
• 2018

원자력 시설에 적용되는 안전 필수 시스템의 소프트웨어는 매우 높은 수준의 신뢰성이 요구되기 때문에 개발 과정은 중요한 인허가 이슈이다. 원자력 안전 필수 시스템에서의 소프트웨어 공학 활동은 산업표준을 준용하는 부분이 있으나, 일부 상이한 부분이 존재하므로 주의해야 한다. 이 논문은 원자력 요건에 적합한 소프트웨어 개발 방법을 제안한다. 원자력 안전 필수 소프트웨어는 기능 및 성능 요건과 더불어, 안전 요건과 보안 요건을 종합적으로 고려하여 계획 수립, 명세화, 확인 및 검증, 시험을 수행하는 것이 중요하다.

• The KIPS Transactions:PartA
• /
• v.18A no.6
• /
• pp.271-280
• /
• 2011

Time-Triggered Architecture (TTA), one of real-time software design paradigms which executes tasks in timely manner, has long been advocated as being better suited in fore-sighting system behavior than event-triggered architecture (ETA). To gain this valuable feature of TTA, however, precise task designing process is mandatory. Alternatively, ETA tries to execute tasks whenever paired events are occurred. It provides intuitive and flexible basement to add/remove tasks and, moreover, better response time performance. However ETA is difficult to analyze because system behavior might be different depending on the order of interrupts detected by the system. Many previous researches recommended TTA when developing safety-critical real-time systems, but cost problem of task designing process and insufficient consensus for applying rigorous software engineering practice are still challenging in practice. This paper describes software refactoring process which applying TTA approach into ETA based embedded software in artificial heart system. We implemented dedicated interrupt monitoring program to capture existing tasks' real-time characteristics. Based on the captured information, proper task designing process is done. Real-time analysis using RMA (Rate-Monotonic Analysis) verified that new design guarantees timeliness of the system. Empirical experiments revealed that revised design is as efficient, when measured in terms of system's external output, as the old design and enhances predictability of the system behavior as well.

• Proceedings of the KSR Conference
• /
• 2004.06a
• /
• pp.322-327
• /
• 2004

This paper describes the structural analysis result of accident EMU(Electric Multiple Units). Structural analysis of EMU was performed for the criteria of safety assessment. Structural analysis using commercial I-DEAS software provided important information on the stress distribution and load transfer mechanisms as well as the amount of damages during rolling stock crash. Tensile tests were performed on two different types of specimens in order to evaluate the strength changes before and after damages, obtained from plastic deformed area and nondeformed region of the accident EMU. The structural analysis and tensile test results have been used to provide the critical information for the criteria of safety assessment.

• Proceedings of the Korean Information Science Society Conference
• /
• 2007.10b
• /
• pp.33-37
• /
• 2007

최근 디지털 컴퓨터와 정보처리기술의 발전과 더불어 원자력 발전소의 계측제어시스템과 같은 안전-필수 시스템에서도 디지털 기술을 채택하기 시작했다. 안전-필수 시스템에 사용되는 소프트웨어는 높은 신뢰도(dependability)가 요구된다. 소프트웨어의 신뢰도는 신뢰성(reliability), 안전성, 보안 등 다양한 속성들로 설명될 수 있다. 소프트웨어의 신뢰도 향상을 위한 프로세스는 결함예방프로세스, 결함허용프로세스, 결함제거프로세스 그리고 결함예측프로세스가 있으며 이들 프로세스는 소프트웨어 수명주기 초반부터 수행되어야 한다. 본 논문에서는 소프트웨어 신뢰도향상을 위한 신뢰도 프로세스 모델과 개발 단계별로 수행되어야 할 신뢰도 태스크를 제시한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2008.05a
• /
• pp.257-260
• /
• 2008

디지털 컴퓨터와 정보처리기술의 급속한 발전과 함께 산업계 전반적으로 아날로그 기술은 쇠퇴하고 디지털 기술로 전환되고 있다. 심지어 안전-필수 기능을 담당하는 원자력발전소의 계측제어시스템에서도 제한적으로 디지털 기술을 채택하여 사용하기 시작했다. 지금까지 소프트웨어의 신뢰도의 정량화에 대한 연구는 많이 이루어져 왔으나 소프트웨어가 가지는 특수성 때문에 연구결과에 대해 전문가들의 동의를 얻지 못하고 있는 상태이다. 원자력발전소에서는 확률적 안전성 평가(PSA)를 수행할 때 소프트웨어의 실패에 기인한 위험은 무시하고 있다. 하지만, 소프트웨어를 기반으로 한 디지털 시스템의 사용이 점점 늘어남에 따라 소프트웨어 신뢰도에 대한 정량화가 점점 더 요구되고 있다. 본 연구에서는 소프트웨어의 실패모드를 정의하고 해당 실패모드에 의해 사고가 발생할 확률을 베이지안 통계이론을 이용하여 정량화하였다.

• Journal of Internet Computing and Services
• /
• v.6 no.4
• /
• pp.37-46
• /
• 2005

Computer are being used in an increasingly wide variety of application areas, and their correct operation is often critical for business success and humasn safety. Developing high quality software products is therefore of prime important. The recent game software become popular, so we are interest in the game software testing. According to the kinds of game software, because it has the different characters, so game software testing is very difficult. According to enviroment change, Recently, online game is popular, so online game trade in the world market. In the company, developers try to develop the reliable game software. But we can experience many fault of game software in spite of the beta testing. Especially, Testing is very difficult on the game software because of various environment and functionality. We tried the survey for game user. In this paper, we study the quality testing metric of game software fault basis on the ISO/IEC 9126. Also, we consist of the check list of game software a point of view user. It apply for the reliability testing metrics of ISO/IEC 9126.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.17 no.4
• /
• pp.382-391
• /
• 2016

For safety-critical systems including railways, there has been a growing need for effective and systematic safety management processes. The outcomes of efforts in this area are international safety standards, such as IEC 61508, 62278, and ISO 26262. One of the principal activities in the safety process is hazard analysis. For this reason, considerable efforts have been directed toward methods of hazard analysis. On the other hand, the hazard analysis methods reported thus far appear to be unclear in terms of their relationship with the system design process. In addition, in some cases, the methods appear to rely heavily on information regarding the hardware and software components, the number of which is increasing. These aspects can become troublesome when design changes are necessary. To improve the situation, in this paper, hazard analysis was carried out using the result of functional analysis early in the concept development stage for a safety-critical system design. Because hazard analysis is carried out at the system level and the result is then used to develop the safety requirements, improvements can be expected in terms of the development time and cost when design changes are required due to changes in the requirements. As a case study, the generation of safety requirements for the development of light rail transit stations is presented.