Formal analysis of human-computer interaction using model checking

Experiments with simulators allow psychologists to better understand the causes of human errors and build models of cognitive processes to be used in human reliability assessment (HRA). This paper investigates an approach to task failure analysis based on patterns of behaviour, by contrast to more traditional event-based approaches. It considers, as a case study, a formal model of an air traffic control (ATC) system which incorporates controller behaviour. The cognitive model is formalised in the CSP process algebra. Patterns of behaviour are expressed as temporal logic properties. Then a model-checking technique is used to verify whether the decomposition of the operator's behaviour into patterns is sound and complete with respect to the cognitive model. The decomposition is shown to be incomplete and a new behavioural pattern is identified, which appears to have been overlooked in the analysis of the data provided by the experiments with the simulator. This illustrates how formal analysis of operator models can yield fresh insights into how failures may arise in interactive systems.

Carvedilol reduces the costs of medical care in severe heart failure: An economic analysis of the COPERNICUS study applied to the United Kingdom

Background: The aim of this study was to determine the effects of carvedilol on the costs related to the treatment of severe chronic heart failure (CHF). Methods: Costs for the treatment for heart failure within the National Health Service (NHS) in the United Kingdom (UK) were applied to resource utilisation data prospectively collected in all patients randomized into the Carvedilol Prospective Randomized Cumulative Survival (COPERNICUS) Study. Unit-specific, per them (hospital bed day) costs were used to calculate expenditures due to hospitalizations. We also included costs of carvedilol treatment, general practitioner surgery/office visits, hospital out-patient clinic visits and nursing home care based on estimates derived from validated patterns of clinical practice in the UK. Results: The estimated cost of carvedilol therapy and related ambulatory care for the 1156 patients assigned to active treatment was 530,771 pound (44.89 pound per patient/month of follow-up). However, patients assigned to carvedilol were hospitalised less often and accumulated fewer and less expensive days of admission. Consequently, the total estimated cost of hospital care was 3.49 pound million in the carvedilol group compared with 4.24 pound million for the 1133 patients in the placebo arm. The cost of post-discharge care was also less in the carvedilol than in the placebo group (479,200 pound vs. 548,300) pound. Overall, the cost per patient treated in the carvedilol group was 3948 pound compared to 4279 pound in the placebo group. This equated to a cost of 385.98 pound vs. 434.18 pound, respectively, per patient/month of follow-up: an 11.1% reduction in health care costs in favour of carvedilol. Conclusions: These findings suggest that not only can carvedilol treatment increase survival and reduce hospital admissions in patients with severe CHF but that it can also cut costs in the process.

Is mortality from heart failure increasing in Australia? An analysis of official data on mortality for 1997-2003

Objective To assess whether trends in mortality from heart failure(HF) in Australia are due to a change in awareness of the condition or real changes in its epidemiology. Methods We carried out a retrospective analysis of official data on national mortality data between 1997 and 2003. A death was attributed to HF if the death certificate mentioned HF as either the underlying cause of death (UCD) or among the contributory factors. Findings From a total of 907 242 deaths, heart failure was coded as the UCD for 29 341 (3.2%) and was mentioned anywhere on the death certificate in 135 268 (14.9%). Between 1997 and 2003, there were decreases in the absolute numbers of deaths and in the age-specific and age-standardized mortality rates for HF either as UCD or mentioned anywhere for both sexes. HF was mentioned for 24.6% and 17.8% of deaths attributed to ischaemic heart disease and circulatory disease, respectively, and these proportions remained unchanged over the period of study. In addition, HF as UCD accounted for 8.3% of deaths attributed to circulatory disease and this did not change materially from 1997 to 2003. Conclusion The decline in mortality from HF measured as either number of deaths or rate probably reflects a real change in the epidemiology of HF. Population-based studies are required to determine accurately the contributions of changes in incidence, survival and demographic factors to the evolving epidemiology of HF.

An automated failure mode and effect analysis based on high-level design specificication with behavior trees

Formal methods have significant benefits for developing safety critical systems, in that they allow for correctness proofs, model checking safety and liveness properties, deadlock checking, etc. However, formal methods do not scale very well and demand specialist skills, when developing real-world systems. For these reasons, development and analysis of large-scale safety critical systems will require effective integration of formal and informal methods. In this paper, we use such an integrative approach to automate Failure Modes and Effects Analysis (FMEA), a widely used system safety analysis technique, using a high-level graphical modelling notation (Behavior Trees) and model checking. We inject component failure modes into the Behavior Trees and translate the resulting Behavior Trees to SAL code. This enables us to model check if the system in the presence of these faults satisfies its safety properties, specified by temporal logic formulas. The benefit of this process is tool support that automates the tedious and error-prone aspects of FMEA.

Analysis of service stress corrosion cracking in a natural gas transmission pipeline, active or dormant?

Stress corrosion cracks (SCC) had been found in a natural gas transmission pipeline during a dig-up and inspection program. The question was raised as to whether the SCC was active or dormant. This paper describes the resultant investigation to determine if a particular service crack was actively growing. The strategy adopted was to assess the appearance of the fracture surface of the service crack and to compare with expectations from laboratory specimens with active SCC. The conclusions from this study are as follows. To judge whether a crack in the service pipe is active or dormant, it is reasonable to compare the very crack tip of the service crack and a fresh crack in a laboratory sample. If the crack tip of the active laboratory sample is similar to that of the service pipe, it means the crack in the service pipe is likely to be active. From the comparison of the crack tip between the service pipe and the laboratory samples, it appears likely that the cracks in the samples extracted from service were most likely to have been active intergranular stress corrosion cracks. (C) 2003 Elsevier Ltd. All rights reserved.

Cost of an emerging epidemic: an economic analysis of atrial fibrillation in the UK

Objective: To evaluate the cost of atrial fibrillation (AF) to health and social services in the UK in 1995 and, based on epidemiological trends, to project this estimate to 2000. Design, setting, and main outcome measures: Contemporary estimates of health care activity related to AF were applied to the whole population of the UK on an age and sex specific basis for the year 1995. The activities considered ( and costs calculated) were hospital admissions, outpatient consultations, general practice consultations, and drug treatment ( including the cost of monitoring anticoagulant treatment). By adjusting for the progressive aging of the British population and related increases in hospital admissions, the cost of AF was also projected to the year 2000. Results: There were 534 000 people with AF in the UK during 1995. The direct'' cost of health care for these patients was pound 244 million (similar toE350 million) or 0.62% of total National Health Service ( NHS) expenditure. Hospitalisations and drug prescriptions accounted for 50% and 20% of this expenditure, respectively. Long term nursing home care after hospital admission cost an additional pound46.4 million (similar toE66 million). The direct cost of AF rose to pound459 million (similar toE655 million) in 2000, equivalent to 0.97% of total NHS expenditure based on 1995 figures. Nursing home costs rose to pound111 million (similar toE160 million). Conclusions: AF is an extremely costly public health problem.

Minimal instrumentation may compromise failure diagnosis with an ecological interface

Interfaces designed according to ecological interface design (EID) display higher-order relations and properties of a work domain so that adaptive operator problem solving can be better supported under unanticipated system conditions. Previous empirical studies of EID have assumed that the raw data required to derive and communicate higher-order information would be available and reliable. The present research examines the relative advantages of an EID interface over a conventional piping-and-instrumentation diagram (PID) when instrumentation is maximally or only minimally adequate. Results show an interaction between interface and the adequacy of the instrumentation. Failure diagnosis performance with the EID interface with maximally adequate instrumentation is best overall. Performance with the EID interface drops more drastically from maximally to minimally adequate instrumentation than does performance with the PID interface, to the point where the EID interface with minimally adequate instrumentation supports nonsignificantly worse performance than does the equivalent PID interface. Actual or potential applications of this research include design of instrumentation and displays for complex industrial processes.

CHARMed - the effects of candesartan in heart failure

The Candesartan in Heart failure: Assessment of Reduction in Mortality and mortality (CHARM) programme has already shown that candesartan is an effective alternative to angiotensin-converting enzyme (ACE) inhibitors (CHARM-Alternative), that additional benefits can be achieved by adding candesartan to ACE inhibitors (CHARM-Added), and that in patients with a preserved cardiac output there are reduced hospital admissions (CHARM-Preserved). Further recent analysis of the CHARM programme has shown that of the cardiovascular deaths, the benefit of candesartan was due to a reduction in sudden death and progressive heart failure, and that these reductions were observed in the -Alternative and -Added but not -Preserved components. Combination of the CHAR M-Alternative and -Added trials confirmed this reduction of cardiovascular deaths, and also demonstrated that candesartan reduced hospital admissions. There were also improvements in the New York Heart Association functional class of heart failure in the -Alternative and -Added, but not -Preserved, components of CHARM. The benefits of candesartan in heart failure are maintained in the presence of an ACE inhibitor and P-blocker. So far, all of the findings with candesartan in the CHARM programme have been favourable/CHARMed, although the beneficial effects in patients with a preserved cardiac output are limited.

Repeated occurrence of basal cell carcinoma of the skin and multifailure survival analysis: Follow-up data from the nambour skin cancer prevention trial

The aim of this study was to apply multifailure survival methods to analyze time to multiple occurrences of basal cell carcinoma (BCC). Data from 4.5 years of follow-up in a randomized controlled trial, the Nambour Skin Cancer Prevention Trial (1992-1996), to evaluate skin cancer prevention were used to assess the influence of sunscreen application on the time to first BCC and the time to subsequent BCCs. Three different approaches of time to ordered multiple events were applied and compared: the Andersen-Gill, Wei-Lin-Weissfeld, and Prentice-Williams-Peterson models. Robust variance estimation approaches were used for all multifailure survival models. Sunscreen treatment was not associated with time to first occurrence of a BCC (hazard ratio = 1.04, 95% confidence interval: 0.79, 1.45). Time to subsequent BCC tumors using the Andersen-Gill model resulted in a lower estimated hazard among the daily sunscreen application group, although statistical significance was not reached (hazard ratio = 0.82, 95% confidence interval: 0.59, 1.15). Similarly, both the Wei-Lin-Weissfeld marginal-hazards and the Prentice-Williams-Peterson gap-time models revealed trends toward a lower risk of subsequent BCC tumors among the sunscreen intervention group. These results demonstrate the importance of conducting multiple-event analysis for recurring events, as risk factors for a single event may differ from those where repeated events are considered.

A multiple account framework for cost-benefit analysis

The paper presents a spreadsheet-based multiple account framework for cost-benefit analysis which incorporates all the usual concerns of cost-benefit analysts such as shadow-pricing to account for market failure. distribution of net benefits. sensitivity and risk analysis, cost of public funds, and environmental effects. The approach is generalizable to a wide range of projects and situations and offers a number of advantages to both analysts and decision-makers, including transparency, a check on internal consistency, and a detailed summary of project net benefits disaggregated by stakeholder group. Of particular importance is the ease with which this framework allows for a project to be evaluated from alternative decision-making perspectives and under alternative policy scenarios where the trade-offs among the project's stakeholders can readily be identified and quantified. (C) 2004 Elsevier Ltd. All rights reserved.

Pitch jump probability measures for the analysis of snoring sounds in apnea

Obstructive sleep apnea (OSA) is a highly prevalent disease in which upper airways are collapsed during sleep, leading to serious consequences. The gold standard of diagnosis, called polysomnography (PSG), requires a full-night hospital stay connected to over ten channels of measurements requiring physical contact with sensors. PSG is inconvenient, expensive and unsuited for community screening. Snoring is the earliest symptom of OSA, but its potential in clinical diagnosis is not fully recognized yet. Diagnostic systems intent on using snore-related sounds (SRS) face the tough problem of how to define a snore. In this paper, we present a working definition of a snore, and propose algorithms to segment SRS into classes of pure breathing, silence and voiced/unvoiced snores. We propose a novel feature termed the 'intra-snore-pitch-jump' (ISPJ) to diagnose OSA. Working on clinical data, we show that ISPJ delivers OSA detection sensitivities of 86-100% while holding specificity at 50-80%. These numbers indicate that snore sounds and the ISPJ have the potential to be good candidates for a take-home device for OSA screening. Snore sounds have the significant advantage in that they can be conveniently acquired with low-cost non-contact equipment. The segmentation results presented in this paper have been derived using data from eight patients as the training set and another eight patients as the testing set. ISPJ-based OSA detection results have been derived using training data from 16 subjects and testing data from 29 subjects.