Specification and Evaluation of Safety Properties in a Component-Based Software Engineering Process

Over the past years, component-based software engineering has become an established paradigm in the area of complex software intensive systems. However, many techniques for analyzing these systems for critical properties currently do not make use of the component orientation. In particular, safety analysis of component-based systems is an open field of research. In this chapter we investigate the problems arising and define a set of requirements that apply when adapting the analysis of safety properties to a component-based software engineering process. Based on these requirements some important component-oriented safety evaluation approaches are examined and compared.

Model-Driven safety evaluation with state-event-based component failure annotations

Over the past years, the paradigm of component-based software engineering has been established in the construction of complex mission-critical systems. Due to this trend, there is a practical need for techniques that evaluate critical properties (such as safety, reliability, availability or performance) of these systems. In this paper, we review several high-level techniques for the evaluation of safety properties for component-based systems and we propose a new evaluation model (State Event Fault Trees) that extends safety analysis towards a lower abstraction level. This model possesses a state-event semantics and strong encapsulation, which is especially useful for the evaluation of component-based software systems. Finally, we compare the techniques and give suggestions for their combined usage

An automated failure mode and effect analysis based on high-level design specificication with behavior trees

Formal methods have significant benefits for developing safety critical systems, in that they allow for correctness proofs, model checking safety and liveness properties, deadlock checking, etc. However, formal methods do not scale very well and demand specialist skills, when developing real-world systems. For these reasons, development and analysis of large-scale safety critical systems will require effective integration of formal and informal methods. In this paper, we use such an integrative approach to automate Failure Modes and Effects Analysis (FMEA), a widely used system safety analysis technique, using a high-level graphical modelling notation (Behavior Trees) and model checking. We inject component failure modes into the Behavior Trees and translate the resulting Behavior Trees to SAL code. This enables us to model check if the system in the presence of these faults satisfies its safety properties, specified by temporal logic formulas. The benefit of this process is tool support that automates the tedious and error-prone aspects of FMEA.

An integrated analysis of five double-blind, randomized controlled trials evaluating the safety and efficacy of a hyaluronan product for intra-articular injection in osteoarthritis of the kneel

Objective: Five double-blind, randomized, saline-controlled trials (RCTs) were included in the United States marketing application for an intra-articular hyaluronan (IA-HA) product for the treatment of osteoarthritis (OA) of the knee. We report an integrated analysis of the primary Case Report Form (CRF) data from these trials. Method. Trials were similar in design, patient population and outcome measures - all included the Lequesne Algofunctional Index (LI), a validated composite index of pain and function, evaluating treatment over 3 months. Individual patient data were pooled; a repeated measures analysis of covariance was performed in the intent-to-treat (ITT) population. Analyses utilized both fixed and random effects models. Safety data from the five RCTs were summarized. Results: A total of 1155 patients with radiologically confirmed knee OA were enrolled: 619 received three or five IA-HA injections; 536 received. placebo saline injections. In the active and control groups, mean ages were 61.8 and 61.4 years; 62.4% and 58.8% were women; baseline total Lequesne scores 11.03 and 11.30, respectively. Integrated analysis of the pooled data set found a statistically significant reduction (P < 0.001) in total Lequesne score with hyaluronan (HA) (-2.68) vs placebo (-2.00); estimated difference -0.68 (95% CI: -0.56 to -0.79), effect size 0.20. Additional modeling approaches confirmed robustness of the analyses. Conclusions: This integrated analysis demonstrates that multiple design factors influence the results of RCTs assessing efficacy of intra-articular (IA) therapies, and that integrated analyses based on primary data differ from meta-analyses using transformed data. (C) 2006 OsteoArthritis Research Society International. Published by Elsevier Ltd. All rights reserved.

Analysis of workplace injuries in a dental school environment

Workplace injuries at the University of Queensland Dental School during the period 1992-1994 were assessed to determine their incidence, and the associated indirect costs, causal factors, and appropriate preventive strategies. Overall, dental chairside assistants experienced a higher incidence of injuries than students both on a per worker and per time basis. Of the injuries with a low risk of cross-infection, burns and scalds from sterilizing equipment, and eye injuries in laboratories were the most common. This emphasizes the importance of wearing appropriate protective equipment in areas outside the treatment zone, and the need for signage and education. Common causes of sharps injuries were burs left in handpieces, two-handed needle recapping, and cleaning of probes in the sterilizing room. Changes to techniques and equipment would prevent such incidents. A range of factors which contribute to the calculation of indirect costs following injuries in the dental workplace are identified.

The effect of coal particle size on colorimetric analysis of roadway dust

Colorimetric analysis of roadway dust is currently a method for monitoring the incombustible content of mine roadways within Australian underground coal mines. To test the accuracy of this method, and to eliminate errors of judgement introduced by human operators in the analysis procedure, a number of samples were tested using scanning software to determine absolute greyscale values. High variability and unpredictability of results was noted during this testing, indicating that colorimetric testing is sensitive to parameters within the mine that are not currently reproduced in the preparation of reference samples. This was linked to the dependence of colour on particle surface area, and hence also to the size distribution of coal particles within the mine environment. (C) 2001 Elsevier Science Ltd. All rights reserved.

Safety and efficacy of low anterior en bloc resection as part of cytoreductive surgery for patients with ovarian cancer

Objective. To examine the feasibility and safety of a low anterior resection of the rectosigmoid plus adjacent pelvic tumour as part of primary cytoreduction for ovarian cancer. Methods. This study included 65 consecutive patients with primary ovarian cancer who had debulking surgery from 1996 through 2000. All patients underwent an en bloc resection of ovarian cancer and a rectosigmoid resection followed by an end-to-end anastomosis. Parameters for safety and efficacy were considered as primary statistical endpoints for the aim of this analysis. Results. Postoperative residual tumour was nil, 1 cm in 14, 34, and 14 patients, respectively. The median postoperative hospital stay was 11 days (range, 6 to 50 days). Intraoperative complications included an injury to the urinary bladder in one patient. Postoperative complications included wound complications (n=14, 21.5%), septicemia (n=9, 13.8%), cardiac complications (n=7, 10.8%), thromboembolic complications (n=5, 7.7%) ileus (n=2, 3.1%) anastomotic leak (n=2, 3.1%) and fistula (n=1, 1.5%). Reasons for a reoperation during the same admission included repair of an anastomotic leak (n=1), postoperative hemorrhage (n=1), and wound debridement (n=1). Wound complications, septicemia, and anastomotic leak formation were more frequent in patients who had a serum albumin level of less than or equal to 30 g/L preoperatively. There was one surgically related mortality in a patient who died from a cerebral vascular accident 2 days postoperatively. Conclusions. An en bloc resection as part of primary cytoreductive surgery for ovarian cancer is effective and its morbidity is acceptably low. (C) 2001 Academic Press.

A probabilistic analysis of Clostridium perfringens growth during food service operations

The purpose of this study was threefold: first, the study was designed to illustrate the use of data and information collected in food safety surveys in a quantitative risk assessment. In this case, the focus was on the food service industry; however, similar data from other parts of the food chain could be similarly incorporated. The second objective was to quantitatively describe and better understand the role that the food service industry plays in the safety of food. The third objective was to illustrate the additional decision-making information that is available when uncertainty and variability are incorporated into the modelling of systems. (C) 2002 Elsevier Science B.V. All rights reserved.

An SNP-based PCR assay to differentiate between Listeria monocytogenes lineages derived from phylogenetic analysis of the sigB gene

The alternative sigma factor sigB gene is involved in the stress response regulation of Listeria monocytogenes, and contributes towards growth and survival in adverse conditions. This gene was examined to determine if it could be a useful indicator of lineage differentiation, similar to the established method based on ribotyping. The sigB sequence was resolved in four local L. monocytogenes strains and the phylogenetic relationship among these, and a further 21 sigB gene sequences from strains of different serotype and lineage including two Listeria innocua strains, obtained from the GenBank database were determined. The sigB nucleotide sequences of these 25 Listeria strains were then examined for single nucleotide polymorphic (SNP) sites that could differentiate between the three lineages. Based on nucleotide sequences L. monocytogenes lineage F serotype 1/2b and 4b clustered together, lineage II/serotype 1/2a and 1/2c strains clustered together, lineage III/serotypes 4a and 4c strains clustered together and L. innocua strains clustered together as an outgroup. SNPs differentiating the three lineages were identified. Individual allele-specific PCR reactions based on these polymorphisms were successful in grouping known and a further 37 local L. monocytogenes isolates into the three lineages. (C) 2003 Elsevier B.V. All fights reserved.

Effectiveness and safety of repeat courses of hylan G-F 20 in patients with knee osteoarthritis

Objective: To compare the effectiveness and safety of repeat treatment with hylan G-F 20 based on data from a randomized, controlled trial [Raynauld JP, Torrance GW, Band PA, Goldsmith CH, Tugwell P, Walker V, et al. A prospective, randomized, pragmatic, health outcomes trial evaluating the incorporation of hylan G-F 20 into the treatment paradigm for patients with knee osteoarthritis (Part 1 of 2): clinical results. Osteoarthritis Cartilage 2002;10:506-17]. The hypotheses tested were whether the single-course and repeat-course subgroups would be superior to appropriate care and not different from each other. Method: A total of 255 patients with knee osteoarthritis were randomized to appropriate care with hylan G-F 20 or appropriate care without hylan G-F 20. The hylan G-F 20 group was partitioned into two subgroups: (1) patients who received a single course of hylan G-F 20; and (2) patients who received two or more courses of hylan G-F 20. Results: For the primary effectiveness measure, change in Western Ontario and McMaster Universities Osteoarthritis Index (WOMAC) pain score as a percent of baseline, the single-course subgroup improved by 41%, the repeat-course subgroup by 35%, and the appropriate care group by 14%. Both subgroups improved significantly more than the appropriate care group (P < 0.05), and were not statistically significantly different from each other (70% power to detect a 20% difference). Secondary effectiveness measures showed similar results. In the repeat-course subgroup, no statistically significant differences were found in the number of local adverse events, the number of patients with local adverse events, or arthrocentesis rates between the first and repeat courses of treatment. Conclusions: Although the study was neither designed nor powered to examine repeat treatment, this a posteriori analysis provides support for a favorable effectiveness and safety profile of hylan G-F 20 in repeat course patients. (C) 2004 OsteoArthritis Research Society International. Published by Elsevier Ltd. All rights reserved.

Parental occupation and Ewing's sarcoma: Pooled and meta-analysis

Etiologic data on Ewing's sarcoma family of tumors (ESFT) are limited, with only 5 case-control studies reported. Interesting associations, particularly related to parental occupation, have been noted, but results are somewhat inconsistent. We conducted a pooled analysis of 3 case-control studies to assess the overall associations between parental occupation and ESFT. The pooled analysis provided data on parental occupational exposure on 199 cases of ESFT and 1,451 controls. The pooled odds ratio for the periconception and gestation periods were 2.3 (95% CI = 1.3-4.1) for children whose fathers had worked on farms and 3.9 (95% CI 1.6-9.9) for those whose mothers had farmed. For the periconception and gestation periods, there was a 3.5-fold increased risk for those with both parents having farmed and a doubling of risk for those with at least one parent having farmed; pattern of increasing risk with increasing number of years of postnatal parental exposure to farms was seen. No other occupational group (or more narrowly defined occupations) had other than minor inconsistent associations with the occurrence of ESFT. In addition, we conducted a meta-analysis of farm occupation (a main risk factor) including all 4 case-control studies that collected required information to consider parental occupation. Results of the meta-analysis were consistent with those from the pooled analysis. This collaborative analysis of available individual data on parental occupation and ESFT in the offspring provides evidence supporting the hypothesis of an association between ESFT and parental occupation in farming. © 2005 Wiley-Liss, Inc.

How is leflunomide prescribed and used in Australia? analysis of prescribing and adverse effect reporting

Purpose To evaluate the use of leflunomide in the Australian community since introduction in 2000. Trends in adverse drug reaction (ADR) reporting were also studied. Methods Annual Australian prescription and dispensing statistics were analysed. Drug utilisation was estimated as defined daily doses (DDD)/1000 inhabitants/day. ADR data from the Therapeutic Goods Administration's Adverse Drug Reactions Advisory Committee (ADRAC) national monitoring system were compared with the World Health Organisation (WHO) Vigibase records. Results Leflunomide use in Australia (dispensing data) increased from 0.2 in 2000 to 0.4 DDD/1000 inhabitants/day in 2002. The same overall pattern was observed in the 'authority to prescribe' data. From 2000-2002, prescribing of the starter pack (3 x 100 mg loading dose plus 30 x 20 mg tablets) declined (down 74%); likewise for the 20mg (30 tablets) pack. Gradual increases were noted for the 10 mg (30 tablets) pack (up 40%). Approximately 135 reports, detailing about 370 individual ADR, were generated annually. Gastro-intestinal disorders predominated, accounting for 24% of reactions reported to ADRAC. Skin and appendages disorders constituted 14% of reported reactions. Deaths in leflunomide users were attributed to a combination of haematological and gastro-intestinal complications, but it was not possible to ascertain other medication usage or contributing factors. Trends observed with the ADRAC reports were consistent with the WHO database. Conclusions Leflunomide was the first registered DMARD in Australia in over a decade and its use has increased within the community. The ADR reports might have contributed to Australian rheumatologists gradually abandoning loading patients with high doses of leflunomide in favour of starting therapy at lower doses. Copyright (c) 2006 John Wiley & Sons, Ltd.

Safety behaviors and dysfunctional beliefs about sleep: Testing a cognitive model of the maintenance of insomnia

Objective: Our aim was to determine if insomnia severity, dysfunctional beliefs about sleep, and depression predicted sleep-related safety behaviors. Method: Standard sleep-related measures (such as the Insomnia Severity Index; the Dysfunctional Beliefs About Sleep scale; the Depression, Anxiety, and Stress Scale; and the Sleep-Related Behaviors Questionnaire) were administered. Additionally, 14 days of sleep diary (Pittsburg Sleep Diary) data and actual use of sleep-related behaviors were collected. Results: Regression analysis revealed that dysfunctional beliefs about sleep predicted sleep-related safety behaviors. Insomnia severity did not predict sleep-related safety behaviors. Depression accounted for the greatest amount of unique variance in the prediction of safety behaviors, followed by dysfunctional beliefs. Exploratory analysis revealed that participants with higher levels of depression used more sleep-related behaviors and reported greater dysfunctional beliefs about their sleep. Conclusion: The findings underlie the significant influence that dysfunctional beliefs have on individuals' behaviors. Moreover, the results suggest that depression may need to be considered as an explicit component of cognitive-behavioral models of insomnia. (c) 2006 Elsevier Inc. All rights reserved.