The OECD Halden Reactor Project. The OECD Halden Reactor Project (HRP) is an International Research Project between 19 countries in Europe, America and Asia Two main research areas: Fuel research at the Halden Boiling Water Reactor
Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.
The OECD Halden Reactor Project (HRP) is an International Research Project between 19 countries in Europe, America and Asia
Two main research areas:
A main research activity is the safe use of computers for control and supervision of nuclear power plants.
HRP has for thirty years worked in the area of software dependability, focusing on
- fault avoidance
· quality assuranceprinciples
· formal development methods
- fault detection,
· static analysis
- fault tolerance,
· safety checks
·- reliability and safety assessment
Deryk has asked us to give comments to four questions /problems.
These are difficult questions to answer, in particular in less than 5 minutes.
I will rather comment on them with reference to related activities at the Halden Project
How to construct a safety justification for programmable systems important to safety?
Safety justification will be based on a variety qualitative and quantitative evidences.
At Halden we have in an experiment tried combine these evidences using Bayesian Belief Nets
Other acceptance criteria
Justification for safety critical application
How to make the requirements specification accurate and cost-effective - especially at the interfaces between the supplier, user and regulator?
We are participating in a Nordic project on requirements specification.
Emphasis on traceability between
Adaption to different levels of formality.
This will aid the configuration management of the requirement specification and their realisation.
How to provide sufficient evidence of 'off-the shelf' product quality for applications important to safety?
Data on producer pedigree may be available
A ’good’ vendor may provide principles for production
Difficult to get detailed information about development process.
User experience and operational data would be useful, but often not available.
It may be useful to divide COTS based systems into smaller components and estimate reliability of them,
and then use conventional reliability analysis methods.
Licensing aspects of programmable or 'smart' devices for the nuclear industry - what issues should future research resolve.
Related to statements on justification and COTS.
For software safety critical 'smart' devices, where no information about development and code is available,
It may be necessary to analyse the machine code.
Tools for program analysis based on machine code was made in the SOSAT project with TüV, ISTec and Halden.