Guided safety analysis for cyber physical systems

Abstract

Systems and methods for maintaining the safety of a software-based system. One method includes automatically generating a first artifact tree for a hazard for a first version of the system and automatically transforming the first artifact tree into a first augmented tree using a set of heuristics. The method also includes automatically generating a second artifact tree for the hazard for a second version of the system and automatically transforming the second artifact tree for the hazard into a second augmented tree using the set of heuristics. The method further includes automatically comparing the first augmented tree and the second augmented tree to generate a delta view, and automatically generating, based on the delta view, at least one selected from a group consisting of a safety warning for the second version of the software-based system and an actionable recommendation to maintain safety of the second version of the software-based system.

1 - 20 . (canceled) 
     
     
         21 . A method for maintaining the safety of a software-based system, the method comprising:
 receiving a first artifact tree for a hazard for a first version of the software-based system, the first artifact tree representing a hierarchical structure of the first version of the software including requirements and code of the first version of the software addressing a hazard;   transforming the first artifact tree into a first augmented tree;   receiving a second artifact tree for the hazard for a second version of the software-based system;   transforming the second artifact tree for the hazard into a second augmented tree;   automatically, with an electronic processor, comparing the first augmented tree and the second augmented tree to generate a delta view;   automatically, with the electronic processor, creating at least one actionable recommendation for the software-based system based on the delta view to maintain safety of the second version of the software-based system; and   modifying the software-based system based on the actionable recommendation.   
     
     
         22 . The method of  claim 21 , wherein the first artifact tree is generated by recursively following traceability paths defined by a model for a plurality of artifacts associated with mitigation the hazard, the traceability paths representing links between the plurality of artifacts. 
     
     
         23 . The method of  claim 22 , wherein the links represented by the traceability paths are created manually, created automatically, or mined from commit messages. 
     
     
         24 . The method of  claim 21 , wherein the delta view identifies at least one artifact added for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         25 . The method of  claim 21 , wherein the delta view identifies at least one artifact modified for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         26 . The method of  claim 21 , wherein the delta view identifies at least one artifact deleted for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         27 . The method of  claim 21 , wherein the delta view identifies at least one link added for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         28 . The method of  claim 21 , wherein the delta view identifies at least one link modified for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         29 . The method of  claim 21 , wherein the delta view identifies at least one link deleted for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         30 . The method of  claim 21 , further comprising generating and outputting a visualization based on the delta view. 
     
     
         31 . The method of  claim 30 , wherein each of a plurality of nodes included in the visualization is displayed differently based on whether each of plurality of nodes was added, modified, or deleted. 
     
     
         32 . The method of  claim 31 , wherein each of the plurality of nodes included in the visualization is displayed differently using color coding. 
     
     
         33 . The method of  claim 30 , wherein the actionable recommendation is associated with at least one node included in the visualization. 
     
     
         34 . A system for maintaining the safety of a software-based system, the system comprising:
 at least one electronic processor configured to
 receive a first artifact tree for a hazard for a first version of the software-based system, the first artifact tree representing a hierarchical structure of the first version of the software including requirements and code of the first version of the software addressing a hazard; 
 transform the first artifact tree into a first augmented tree; 
 receive a second artifact tree for the hazard for a second version of the software-based system; 
 transform the second artifact tree for the hazard into a second augmented tree; 
 automatically compare the first augmented tree and the second augmented tree to generate a delta view; 
 automatically create at least one actionable recommendation for the software-based system based on the delta view to maintain safety of the second version of the software-based system; and 
 modify the software-based system based on the actionable recommendation. 
   
     
     
         35 . The system of  claim 34 , wherein the first artifact tree is generated by recursively following traceability paths defined by a model for a plurality of artifacts associated with mitigation the hazard, the traceability paths representing links between the plurality of artifacts. 
     
     
         36 . The system of  claim 35 , wherein the links represented by the traceability paths are created manually, created automatically, or mined from commit messages. 
     
     
         37 . The system of  claim 34 , wherein the delta view identifies at least one selected from a group consisting of an artifact added for the second version of the software-based system as compared to the first version of the software-based system, an artifact modified for the second version of the software-based system as compared to the first version of the software-based system, an artifact deleted for the second version of the software-based system as compared to the first version of the software-based system, a link added for the second version of the software-based system as compared to the first version of the software-based system, a link modified for the second version of the software-based system as compared to the first version of the software-based system, and a link deleted for the second version of the software-based system as compared to the first version of the software-based system. 
     
     
         38 . The system of  claim 34 , wherein the at least one electronic processor is further configured to generate and output a visualization based on the delta view. 
     
     
         39 . The system of  claim 38 , wherein each of a plurality of nodes included in the visualization is displayed differently based on whether each of plurality of nodes was added, modified, or deleted. 
     
     
         40 . Non-transitory computer readable medium including instructions that, when executed by at least one electronic processors, perform a set of functions, the set of functions comprising:
 receiving a first artifact tree for a hazard for a first version of the software-based system, the first artifact tree representing a hierarchical structure of the first version of the software including requirements and code of the first version of the software addressing a hazard;   transforming the first artifact tree into a first augmented tree;   receiving a second artifact tree for the hazard for a second version of the software-based system;   transforming the second artifact tree for the hazard into a second augmented tree;   automatically comparing the first augmented tree and the second augmented tree to generate a delta view;   automatically creating at least one actionable recommendation for the software-based system based on the delta view to maintain safety of the second version of the software-based system; and   modifying the software-based system based on the actionable recommendation.