Formal analysis of human-computer interaction using model checking

Experiments with simulators allow psychologists to better understand the causes of human errors and build models of cognitive processes to be used in human reliability assessment (HRA). This paper investigates an approach to task failure analysis based on patterns of behaviour, by contrast to more traditional event-based approaches. It considers, as a case study, a formal model of an air traffic control (ATC) system which incorporates controller behaviour. The cognitive model is formalised in the CSP process algebra. Patterns of behaviour are expressed as temporal logic properties. Then a model-checking technique is used to verify whether the decomposition of the operator's behaviour into patterns is sound and complete with respect to the cognitive model. The decomposition is shown to be incomplete and a new behavioural pattern is identified, which appears to have been overlooked in the analysis of the data provided by the experiments with the simulator. This illustrates how formal analysis of operator models can yield fresh insights into how failures may arise in interactive systems.

Carvedilol reduces the costs of medical care in severe heart failure: An economic analysis of the COPERNICUS study applied to the United Kingdom

Background: The aim of this study was to determine the effects of carvedilol on the costs related to the treatment of severe chronic heart failure (CHF). Methods: Costs for the treatment for heart failure within the National Health Service (NHS) in the United Kingdom (UK) were applied to resource utilisation data prospectively collected in all patients randomized into the Carvedilol Prospective Randomized Cumulative Survival (COPERNICUS) Study. Unit-specific, per them (hospital bed day) costs were used to calculate expenditures due to hospitalizations. We also included costs of carvedilol treatment, general practitioner surgery/office visits, hospital out-patient clinic visits and nursing home care based on estimates derived from validated patterns of clinical practice in the UK. Results: The estimated cost of carvedilol therapy and related ambulatory care for the 1156 patients assigned to active treatment was 530,771 pound (44.89 pound per patient/month of follow-up). However, patients assigned to carvedilol were hospitalised less often and accumulated fewer and less expensive days of admission. Consequently, the total estimated cost of hospital care was 3.49 pound million in the carvedilol group compared with 4.24 pound million for the 1133 patients in the placebo arm. The cost of post-discharge care was also less in the carvedilol than in the placebo group (479,200 pound vs. 548,300) pound. Overall, the cost per patient treated in the carvedilol group was 3948 pound compared to 4279 pound in the placebo group. This equated to a cost of 385.98 pound vs. 434.18 pound, respectively, per patient/month of follow-up: an 11.1% reduction in health care costs in favour of carvedilol. Conclusions: These findings suggest that not only can carvedilol treatment increase survival and reduce hospital admissions in patients with severe CHF but that it can also cut costs in the process.

Is mortality from heart failure increasing in Australia? An analysis of official data on mortality for 1997-2003

Objective To assess whether trends in mortality from heart failure(HF) in Australia are due to a change in awareness of the condition or real changes in its epidemiology. Methods We carried out a retrospective analysis of official data on national mortality data between 1997 and 2003. A death was attributed to HF if the death certificate mentioned HF as either the underlying cause of death (UCD) or among the contributory factors. Findings From a total of 907 242 deaths, heart failure was coded as the UCD for 29 341 (3.2%) and was mentioned anywhere on the death certificate in 135 268 (14.9%). Between 1997 and 2003, there were decreases in the absolute numbers of deaths and in the age-specific and age-standardized mortality rates for HF either as UCD or mentioned anywhere for both sexes. HF was mentioned for 24.6% and 17.8% of deaths attributed to ischaemic heart disease and circulatory disease, respectively, and these proportions remained unchanged over the period of study. In addition, HF as UCD accounted for 8.3% of deaths attributed to circulatory disease and this did not change materially from 1997 to 2003. Conclusion The decline in mortality from HF measured as either number of deaths or rate probably reflects a real change in the epidemiology of HF. Population-based studies are required to determine accurately the contributions of changes in incidence, survival and demographic factors to the evolving epidemiology of HF.

An automated failure mode and effect analysis based on high-level design specificication with behavior trees

Formal methods have significant benefits for developing safety critical systems, in that they allow for correctness proofs, model checking safety and liveness properties, deadlock checking, etc. However, formal methods do not scale very well and demand specialist skills, when developing real-world systems. For these reasons, development and analysis of large-scale safety critical systems will require effective integration of formal and informal methods. In this paper, we use such an integrative approach to automate Failure Modes and Effects Analysis (FMEA), a widely used system safety analysis technique, using a high-level graphical modelling notation (Behavior Trees) and model checking. We inject component failure modes into the Behavior Trees and translate the resulting Behavior Trees to SAL code. This enables us to model check if the system in the presence of these faults satisfies its safety properties, specified by temporal logic formulas. The benefit of this process is tool support that automates the tedious and error-prone aspects of FMEA.

Substrate-inhibited kinetics with catalyst deactivation in an isothermal CSTR. II. Multiple pseudosteady states and reactor failure

Analytical expressions are derived for the time and magnitude of failure of an isothermal CSTR with substrate-inhibited kinetics, caused by slow catalyst deactivation under three types of parallel and series mechanisms. Reactors operating at high space velocity are found to be most susceptible to early failure and poisoning by product is more dangerous than by reactant. The magnitude of the jump across steady states depends solely on the Langmuir-Hinshelwood kinetic parameters and a detailed analysis of reactor behavior during the jump itself is given.

Wall material properties of yeast cells. Part II. Analysis

In the preceding paper (Part I) force-deformation data were measured with the compression experiment in conjunction with the initial radial stretch ratio and the initial wall-thickness to cell-radius ratio for baker's yeast (Saccharomyces cerevisiae). In this paper, these data have been analysed with the mechanical model of Smith et al. (Smith, Moxham & Middelberg (1998) Chemical Engineering Science, 53, 3913-3922) with the wall constitutive behaviour defined a priori as incompressible and linear-elastic. This analysis determined the mean Young's modulus ((E) over bar), mean maximum von Mises stress-at-failure (<(sigma)over bar>(VM,f)) and mean maximum von Mises strain-at failure (<(epsilon)over bar>(VM,f)) to be (E) over bar = 150 +/- 15 MPa, <(sigma)over bar>(VM,f) = 70 +/- 4 MPa and <(epsilon)over bar>(VM,f) = 0.75 +/- 0.08, respectively. The mean Young's modulus was not dependent (P greater than or equal to 0.05) on external osmotic pressure (0-0.8 MPa) nor compression rate (1.03-7.68 mu m/s) suggesting the incompressible linear-elastic relationship is representative of the actual cell-wall constitutive behaviour. Hydraulic conductivities were also determined and were comparable to other similar cell types (0-2.5 mu m/MPa s). The hydraulic conductivity distribution was not dependent on external osmotic pressure (0-0.8 MPa) nor compression rate (1.03-7.68 mu m/s) suggesting inclusion of cell-wall permeability in the mechanical model is justified. <(epsilon)over bar>(VM,f) was independent of cell diameter and to a first-approximation unaffected (P greater than or equal to 0.01) by external osmotic pressure and compression rate, thus providing a reasonable failure criterion. This criterion states that the cell-wall material will break when the strain exceeds <(epsilon)over bar>(VM,f) = 0.75 +/- 0.08. Variability in overall cell strength during compression was shown to be primarily due to biological variability in the maximum von Mises strain-at-failure. These data represent the first estimates of cell-wall material properties for yeast and the first fundamental analysis of cell-compression data. They are essential for describing cell-disruption at the fundamental level of fluid-cell interactions in general bioprocesses. They also provide valuable new measurements for yeast-cell physiologists. (C) 2000 Elsevier Science Ltd. All rights reserved.

Analysis of the genes flanking xabB: a methyltransferase gene is involved in albicidin biosynthesis in Xanthomonas albilineans

Transposon mutagenesis and complementation studies previously identified a gene (xabB) for a large (526 kDa) polyketide-peptide synthase required for biosynthesis of albicidin antibiotics and phytotoxins in the sugarcane leaf scald pathogen Xanthomonas albilineans. A cistron immediately downstream from xabB encodes a polypeptide of 343 aa containing three conserved motifs characteristic of a family of S-adenosyl-L-methionine (SAM)-dependent O-methyltransferases. Insertional mutagenesis and complementation indicate that the product of this cistron (designated xabC) is essential for albicidin production, and that there is no other required downstream cistron. The xab promoter region is bidirectional, and insertional mutagenesis of the first open reading frame (ORF) in the divergent gene also blocks albicidin biosynthesis. This divergent ORF (designated thp) encodes a protein of 239 aa displaying high similarity to several IS21-like transposition helper proteins. The thp cistron is not located in a recognizable transposon, and is probably a remnant from a past transposition event that may have contributed to the development of the albicidin biosynthetic gene cluster. Failure of 'in trans' complementation of rhp indicates that a downstream cistron transcribed with thp is required for albicidin biosynthesis. (C) 2000 Elsevier Science B.V. All rights reserved.

Analysis of soil wetting and solute transport in subsurface trickle irrigation

The increased use of trickle or drip irrigation is seen as one way of helping to improve the sustainability of irrigation systems around the world. However, soil water and solute transport properties and soil profile characteristics are often not adequately incorporated in the design and management of trickle systems. In this paper, we describe results of a simulation study designed to highlight the impacts of soil properties on water and solute transport from buried trickle emitters. The analysis addresses the influence of soil hydraulic properties, soil layering, trickle discharge rate, irrigation frequency, and timing of nutrient application on wetting patterns and solute distribution. We show that (1) trickle irrigation can improve plant water availability in medium and low permeability fine-textured soils, providing that design and management are adapted to account for their soil hydraulic properties, (2) in highly permeable coarse-textured soils, water and nutrients move quickly downwards from the emitter, making it difficult to wet the near surface zone if emitters are buried too deep, and (3) changing the fertigation strategy for highly permeable coarse-textured soils to apply nutrients at the beginning of an irrigation cycle can maintain larger amounts of nutrient near to and above the emitter, thereby making them less susceptible to leaching losses. The results demonstrate the need to account for differences in soil hydraulic properties and solute transport when designing irrigation and fertigation management strategies. Failure to do this will result in inefficient systems and lost opportunities for reducing the negative environmental impacts of irrigation.