论文部分内容阅读
传统危险分析方法无法胜任对复杂的非线性社会技术系统的分析。系统理论过程分析(STPA)方法是建立在系统理论事故建模和过程(STAMP)基础上的一种新型的危险分析方法,它将安全视为系统的一种涌现特性,认为除了组件失效,组件间的非功能交互也是导致危险的主要原因,并通过定义系统危险、绘制安全控制结构、识别不安全控制行为、确定不安全控制行为起因等4个步骤完成危险分析过程。美国的空中交通态势感知尾随程序(ATSA-ITP)设计案例分析表明,STPA方法的组织形式有序,逻辑结构严谨,分析过程透彻。
Traditional risk analysis methods are not capable of analyzing complex non-linear social technological systems. The system theory process analysis (STPA) method is a new type of hazard analysis method based on STAMP. It regards safety as an emergent characteristic of the system. It considers that in addition to the component failure, the component Non-functional interaction is also the main cause of danger, and the risk analysis process is completed in 4 steps: defining the system danger, drawing the safety control structure, identifying unsafe control behavior and determining the cause of unsafe control behavior. ATSA-ITP design case analysis of the United States shows that the STPA method has an organized and well-organized logic structure and thorough analysis.