Systems-theoretic safety analyses extended for coordination

When interdependent conditions exist among decision units, safety results in part from coordination. Safety analysis methods should correspondingly address coordination. However, state-of-the-art safety analysis methods have limited guidance for analytical inquiry into coordination between interdependent decision systems. This thesis presents theoretical and applied research to address the knowledge gap by extending STAMP (Systems-Theoretic Accident Model and Processes)-based analysis methods STPA (System-Theoretic Process Analysis) and CAST (Causal Analysis based on STAMP). This thesis contributes to knowledge by introducing: 1) a coordination framework for use in analysis, 2) STPA-Coordination and CAST-Coordination, which extend STPA and CAST to analyze coordination, and 3) flawed coordination analysis guidance for use in the extensions. The coordination framework provides explanatory power for observation of and analysis of coordination in sociotechnical systems. The coordination framework includes perspectives for use in the evaluation of coordination, which are used to operationalize the framework for analysis. STPA-Coordination extends STPA with additional steps for analysis of how coordination can lead to unsafe controls (i.e. hazards). In part, STPA-Coordination uses analysis guidance introduced in this thesis that consists of four unique flawed coordination cases and nine coordination elements. CAST-Coordination extends CAST with additional steps to investigate accident causation influences from flawed coordination. Two case studies evaluate the utility of extensions, flawed coordination guidance, and the framework. One case study investigates the application of STPA-Coordination to a current and significant sociotechnical system challenge-unmanned aircraft systems integration into military and civil flight operations. Results are compared to official functional hazard analysis and requirements results. The comparison shows that STPA-Coordination provides additional insights into identifying hazardous coordination scenarios and recommendations. Another case study applies CAST-Coordination to investigate a Patriot missile friendly fire (2003) during Operation Iraqi Freedom, which is a relevant concern today. CAST-Coordination is successfully applied to the friendly-fire coordination problem. When compared to official government accident investigation reports, CAST-Coordination shows benefits in identifying accident influences and generating recommendations to address the coordination and safety problem. Both case study quantitative and qualitative results are promising and suggest STPA- and CAST-Coordination and the coordination framework are useful.

Department dc:contributor.department

Massachusetts Institute of Technology. Department of Aeronautics and Astronautics.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2017

Author dc:creator

• Johnson, Kip E. (Kip Edward), 1978-

Advisor dc:contributor.advisor

• Nancy G. Leveson.

• Aeronautics and Astronautics.

Statement dc:rights

• MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/108922

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/108922