An STPA-based formal composition framework for trustworthy autonomous maritime systems

• Published in: Safety science Vol. 136; p. 105139
• Main Authors: Dghaym, Dana, Hoang, Thai Son, Turnock, Stephen R., Butler, Michael, Downes, Jon, Pritchard, Ben
• Format: Journal Article
• Language: English
• Published: Amsterdam Elsevier Ltd 01-04-2021; Elsevier BV
• Subjects: Autonomous underwater vehicles; Autonomous vehicles; Construction; Cybersecurity; Decision making; Event-B; Formal methods; Maritime autonomous systems; Mission planning; Missions; Modelling; Requirements; SE-STPA; STPA; Studies; Surface vehicles; Systems design; Systems theory; Trustworthiness; Underwater vehicles; Unmanned aerial vehicles; Unmanned vehicles; Verification; Maritime autonomous systems; SE-STPA; Event-B; Formal methods; STPA; Requirements
• ISSN: 0925-7535; 1879-1042
• DOI: 10.1016/j.ssci.2020.105139

A key risk with autonomous systems (AS) is the trustworthiness of the decision-making and control mechanisms that replace human control. To be trustworthy, systems need to remain safe while being resilient to unpredictable changes, functional/operational failures and cybersecurity threats. Rigorous validation and verification are essential to ensure trustworthiness of AS. Current engineering practice relies heavily on Verification and Validation (V&V) test-and-fix of system characteristics which is very time-consuming and expensive, limiting the possibilities for exploration of alternatives in system design. Instead, we focus on building a correct-by-construction system. In this paper, we present an approach to identifying and analysing mission requirements for squads of autonomous missions. Clear definition of requirements is an important pre-requisite for mission planning and for V&V of mission management. We use a structured approach to requirements identification and use formal modelling to help remove ambiguities in the requirements and to specify formal properties that should be satisfied by the missions. Our approach use a combination of analysis techniques based on Systems Theoretic Process Analysis (STPA) and formal modelling to generate critical requirements that ensure the safety and security of the system. We also suggest a compositional approach for formal modelling to enhance re-usability and address the complexity of formal modelling. Our approach is being evaluated through consideration of a combined mission of an Unmanned Surface Vehicle (USV) with deployment/recovery of small Unmanned Underwater Vehicles (UUV) within a shipping channel whereby the USV has to safely maintain station for a long period and then proceed to recover the UUV, while maintaining a communication link to an Unmanned Aerial Vehicle (UAV).
•Propose a generic approach for requirements elicitation using formal methods.•Use STPA and formal modelling to generate safety and security requirements.•Propose a compositional approach to enhance formal modelling and hazard analysis.•Apply our approach to an integrated mission management system of autonomous vehicles.