Experimental thermal hydraulic studies on the enhancement of safety of LWRs

The safe use of nuclear power plants (NPPs) requires a deep understanding of the functioning of physical processes and systems involved. Studies on thermal hydraulics have been carried out in various separate effects and integral test facilities at Lappeenranta University of Technology (LUT) either to ensure the functioning of safety systems of light water reactors (LWR) or to produce validation data for the computer codes used in safety analyses of NPPs. Several examples of safety studies on thermal hydraulics of the nuclear power plants are discussed. Studies are related to the physical phenomena existing in different processes in NPPs, such as rewetting of the fuel rods, emergency core cooling (ECC), natural circulation, small break loss-of-coolant accidents (SBLOCA), non-condensable gas release and transport, and passive safety systems. Studies on both VVER and advanced light water reactor (ALWR) systems are included. The set of cases include separate effects tests for understanding and modeling a single physical phenomenon, separate effects tests to study the behavior of a NPP component or a single system, and integral tests to study the behavior of the whole system. In the studies following steps can be found, not necessarily in the same study. Experimental studies as such have provided solutions to existing design problems. Experimental data have been created to validate a single model in a computer code. Validated models are used in various transient analyses of scaled facilities or NPPs. Integral test data are used to validate the computer codes as whole, to see how the implemented models work together in a code. In the final stage test results from the facilities are transferred to the NPP scale using computer codes. Some of the experiments have confirmed the expected behavior of the system or procedure to be studied; in some experiments there have been certain unexpected phenomena that have caused changes to the original design to avoid the recognized problems. This is the main motivation for experimental studies on thermal hydraulics of the NPP safety systems. Naturally the behavior of the new system designs have to be checked with experiments, but also the existing designs, if they are applied in the conditions that differ from what they were originally designed for. New procedures for existing reactors and new safety related systems have been developed for new nuclear power plant concepts. New experiments have been continuously needed.

Vaccines safety; effect of supervision or SMS on reporting rates of adverse events following immunization (AEFI) with meningitis vaccine (MenAfriVac?): a randomized controlled trial.

BACKGROUND: To ensure vaccines safety, given the weaknesses of the national pharmacovigilance system in Cameroon, there is a need to identify effective interventions that can contribute to improving AEFI reporting. OBJECTIVE: To assess the effect of: (i) sending weekly SMS, or (ii) weekly supervisory visits on AEFI reporting rate during a meningitis immunization campaign conducted in Cameroon in 2012 using the meningitis A conjugate vaccine (MenAfriVac?). METHODS: Health facilities that met the inclusion criteria were randomly assigned to receive: (i) a weekly standardized SMS, (ii) a weekly standardized supervisory visits or (iii) no intervention. The primary outcome was the reported AEFI incidence rate from week 5 to 8 after the immunization campaign. Poisson regression model was used to estimate the effect of interventions after adjusting for health region, type of health facility, type and position of health workers as well as the cumulative number of AEFI reported from weeks 1 to 4. RESULTS: A total of 348 (77.2%) of 451 health facility were included, and 116 assigned to each of three groups. The incidence rate of reported AEFI per 100 health facility per week was 20.0 (15.9-24.1) in the SMS group, 40.2 (34.4-46.0) in supervision group and 13.6 (10.1-16.9) in the control group. Supervision led to a significant increase of AEFI reporting rate compared to SMS [adjusted RR=2.1 (1.6-2.7); p<0.001] and control [RR=2.8(2.1-3.7); p<0.001)] groups. The effect of SMS led to some increase in AEFI reporting rate compared to the control group, but the difference was not statistically significant [RR=1.4(0.8-1.6); p=0.07)]. CONCLUSION: Supervision was more effective than SMS or routine surveillance in improving AEFI reporting rate. It should be part of any AEFI surveillance system. SMS could be useful in improving AEFI reporting rates but strategies need to be found to improve its effectiveness, and thus maximize its benefits.

Estimating the contribution of occupational solar ultraviolet exposure to skin cancer

BACKGROUND: Exposure to solar ultraviolet (UV) light is the main causative factor for skin cancer. Outdoor workers are at particular risk because they spend long working hours outside, may have little shade available and be bound to take their lunch at their workplace. Despite epidemiological evidence of a doubling in risk of squamous cell carcinoma in outdoor workers, the recognition of skin cancer as an occupational disease remains scarce. OBJECTIVE: To assess occupational solar UV doses and its contribution to skin cancer risk. METHODS: A numerical model (SimUVEx) was used to assess occupational and lunch break exposures, characterize exposure patterns and anatomical distribution. Risk of squamous cell carcinoma (SCC) was estimated from an existing epidemiological model. RESULTS: Horizontal body locations received 2.0-2.5 times more UV than vertical locations. Dose associated to lunch outdoor every day was similar to outdoor work one day per week but only half of a seasonal worker. Outdoor workers are associated with an increased risk of SCC but also of frequent acute episodes. CONCLUSION: Occupational solar exposure contributes largely to the overall lifetime UV dose, resulting in an excess risk of SCC. The magnitude of the estimated excess in risk supports the recognition of SCC as an occupational disease.

Practical Solutions for Increased Safety in Paper Mill Operations

Tämä diplomityö käsittelee työterveys- ja työturvallisuushallinnan (TTT) sekä ympäristönsuojelun ongelmia ja riskejä, joita tehdasalueen toiminnanharjoittaja kohtaa ulkoistaessaan tehdastoimintojaan ja siirtyessään käyttämään 24 h ulkoisia kunnossapitopalveluja. Teoriaosa selventää ulkoistukseen liittyviä lainmukaisia määräyksiä ja vaatimuksia koskien terveyden, turvallisuuden ja ympäristöongelmien hallintaa sellu-, paperi- ja kartonkitehtaissa Euroopassa, Yhdysvalloissa ja Suomessa. TTT-toiminnan tason sekä ympäristönsuojelun tason mittaamisen ongelmat tuodaan esille. Olemassa olevia kansainvälisiä TTT-johtamisjärjestelmien ja ympäristöjärjestelmien standardeja, riskien hallintatyökaluja ja ohjelmia esitellään lyhyesti. Käytännön osa toteutettiin tapaustutkimuksena, jonka kohteena oli Äänekosken tehdaskombinaatti ja kemianteollisuuden laitos, Noviant CMC Oy. TTT-hallintatoimien ja ympäristönsuojelun ongelmia tutkitaan tehdastoimintoja ulkoistettaessa. Integroidun johtamisjärjestelmän auditointimenettelyt, ulkoistuksen kohdealueet, pk-yrityksien riskien hallinta ja ulkoisten työntekijöiden turvallisuuskoulutus ovat erityisen tarkastelun alla. Käyttäen hyväksi kerättyä TTT- ja ympäristöaineistoa, suunniteltiin malli ja sisältöehdotus uudelle internet-selain tyyppiselle työkalulle TTT- ja ympäristöasioiden hallinnan avuksi. Työkalu on tarkoitettu palvelemaan Noviant CMC Oy:n eri sidosryhmien tarpeita. Diplomityön käytännön osa muodostaa pohjan JP MILLSAFE - pilottiprojektille, joka käynnistettiin internet-selain tyyppisen turvallisuuspalvelusovelluksen kehittämiseksi palvelemaan Äänekosken tehdaskombinaatin eri sidosryhmien tarpeita.

Safety Traps

Fear of risk provides a rationale for protracted economic downturns. We develop a real business cycle model where investors with decreasing relative risk aversion choose between a risky and a safe technology that exhibit decreasing returns. Because of a feedback effect from the interest rate to risk aversion, two equilibria can emerge: a standard equilibrium and a "safe" one in which investors invest in safer assets. We refer to the dynamics of this second equilibrium as a safety trap because it is self-reinforcing as investors accumulate more wealth and show it to be consistent with Japan's lost decade.

Nrf2 Activation Promotes Keratinocyte Survival during Early Skin Carcinogenesis via Metabolic Alterations.

Pharmacologic activation of the transcription factor NRF2 has been suggested to offer a strategy for cancer prevention. In this study, we present evidence from murine tumorigenesis experiments suggesting there may be limitations to this possibility, based on tumorigenic effects of Nrf2 in murine keratinocytes that have not been described previously. In this setting, Nrf2 expression conferred metabolic alterations in keratinocytes that were protumorigenic in nature, affecting enzymes involved in glutathione biosynthesis or in the oxidative pentose phosphate pathway and other NADPH-producing enzymes. Under stress conditions, coordinate increases in NADPH, purine, and glutathione levels promoted the survival of keratinocytes harboring oncogenic mutations, thereby promoting tumor development. The protumorigenic activity of Nrf2 in keratinocytes was particularly significant in a mouse model of skin tumorigenesis that did not rely upon chemical carcinogenesis. In exploring the clinical relevance of our findings, we confirm that NRF2 and protumorigenic NRF2 target genes were activated in some actinic keratoses, the major precancerous lesion in human skin. Overall, our results reveal an unexpected tumor-promoting activity of activated NRF2 during early phases of skin tumorigenesis. Cancer Res; 75(22); 4817-29. ©2015 AACR.

Borrelia burgdorferi evades the effects of ceftriaxone treatment in a mouse model of Lyme borreliosis

Borrelia burgdorferi infektoitujen hiirten antibioottihoidon jälkeinen oireilu Lymen borrelioosi on puutiaisten välittämä monimuotoinen infektiotauti, jonka tunnetuin oire on ns. vaeltava ihottuma eli erythema migrans. Muita tavallisia ilmentymiä ovat erityisesti nivel- ja hermosto-oireet sekä harvemmin sydän- ja silmäoireet. Suurin osa potilaista paranee täysin terveeksi antibioottihoidon avulla, mutta jopa 10 % borrelioosiin sairastuneista oireilee suositusten mukaisesta hoidosta huolimatta. Pitkittyneen oireilun on ajateltu johtuvan mm. infektion laukaisemasta autoimmuunitaudista tai kroonisesta infektiosta, mutta teorioiden tueksi ei ole kyetty esittämään kiistattomia todisteita. Onkin todennäköistä, että antibioottihoidon jälkeisen oireilun takana on useampia mekanismeja eikä yksi teoria selitä kaikkien potilaiden oireilua. Tässä väitöskirjatyössä on tutkittu hoidonjälkeistä borrelioosia hiirimallin avulla. Varhaisvaiheessa (2 viikkoa infektoinnin jälkeen) annettu antibiootti vähensi hiirten nivelturvotusta ja esti B. burgdorferi – bakteerin kasvun kudoksista otetuista näytteissä. Hoidettu¬jen hiirten B. burgdorferi -spesifiset IgG-luokan vasta-aineet pysyivät kuitenkin koholla ja osasta kudosnäytteistä löytyi B. burgdorferi:n DNA:ta PCR-tutkimuksen avulla. Mikäli hiiret hoidettiin myöhäisessä vaiheessa (yli 18 viikkoa infektoinnista) tulokset olivat muuten samanlaiset, mutta keftriaksoni ei vaikuttanut nivelturvotukseen. Näin hiirissä oli aikaansaatu tilanne, joka on hyvin samankaltainen ihmisen hoitoresistentin borrelia-artriitin kanssa: oireet jatkuvat, mutta taudinaiheuttajaa ei saada esiin. Inflammaatiota vaimentavaa anti-TNF-alphaa on käytetty nivelreuman hoidossa menestyksekkäästi huonosti muuhun hoitoon reagoivilla potilailla ja siitä syystä sen ajateltiin voivan vaikuttaa suotuisasti myös B. burgdorferi -infektoitujen hiirten hoidonjälkeiseen nivelturvotukseen. Sillä ei kuitenkaan ollut vaikutusta nivelturvotukseen, mutta yllättäen hoidon jälkeen osa hiirten kudosnäytteistä osoittautui viljelypositiivisiksi. On siis ilmeistä, että hiirimallissamme osa B. burgdorferi spirokeetoista pystyy välttämään keftriaksonihoidon vaikutuksen joko hakeutumalla elimistössä kudokseen, jossa antibiootin pitoisuus ei nouse riittävän korkeaksi, tai ne kykenevät muuntautumaan metabolisesti inaktiiviin tilaan eikä mikrobilääke yhdessä immuunipuolustuksen kanssa onnistu tappamaan niitä. Jatkotutkimuksissa selvitimme B. burgdorferi - spirokeetan mahdollista piilopaikkaa tutkimalla antibioottihoidon jälkeen useita eri kudoksia PCR-menetelmällä. Tulosten perusteella spirokeetta näyttää suosivan nivelkudosta tai soluja, joita esiintyy nivelessä runsaasti. On kuitenkin edelleen epäselvää, missä muodossa B. burgdorferi –spirokeetat säilyvät kudoksessa antibioottihoidon jälkeen.

Thermal-Hydraulic Studies on the Safety Of VVER-440 Type Nuclear Power Plants

This thesis includes several thermal hydraulic analyses related to the Loviisa WER 440 nuclear power plant units. The work consists of experimental studies, analysis of the experiments, analysis of some plant transits and development of a calculational model for calculation of boric acid concentrations in the reactor. In the first part of the thesis, in the case of won of boric acid solution behaviour during long term cooling period of LOCAs, experiments were performed in scaled down test facilities. The experimental data together with the results of RELAPS/MOD3 simulations were used to develop a model for calculations of boric acid concentrations in the reactor during LOCAs. The results of calculations showed that margins to critical concentrations that would lead to boric acid crystallization were large, both in the reactor core and in the lower plenum. This was mainly caused by the fact that water in the primary cooling circuit includes borax (Na)BsO,.IOHZO), which enters the reactor when ECC water is taken from the sump and greatly increases boric acid solubility in water. In the second part, in the case of simulation of horizontal steam generators, experiments were performed with PACTEL integral test loop to simulate loss of feedwater transients. The PACTEL experiments, as well as earlier REWET III natural circulation tests, were analyzed with RELAPS/MOD3 Version Sm5 code. The analysis showed that the code was capable of simulating the main events during the experiments. However, in the case of loss of secondary side feedwater the code was not completely capable to simulate steam superheating in the secondary side of the steam generators. The third part of the work consists of simulations of Loviisa VVER reactor pump trip transients with RELAPSlMODI Eur, RELAPS/MOD3 and CATHARE codes. All three codes were capable to simulate the two selected pump trip transients and no significant differences were found between the results of different codes. Comparison of the calculated results with the data measured in the Loviisa plant also showed good agreement.

APROS model validation in case of fast transients in a boiling water reactor

This Master´s thesis investigates the performance of the Olkiluoto 1 and 2 APROS model in case of fast transients. The thesis includes a general description of the Olkiluoto 1 and 2 nuclear power plants and of the most important safety systems. The theoretical background of the APROS code as well as the scope and the content of the Olkiluoto 1 and 2 APROS model are also described. The event sequences of the anticipated operation transients considered in the thesis are presented in detail as they will form the basis for the analysis of the APROS calculation results. The calculated fast operational transient situations comprise loss-of-load cases and two cases related to a inadvertent closure of one main steam isolation valve. As part of the thesis work, the inaccurate initial data values found in the original 1-D reactor core model were corrected. The input data needed for the creation of a more accurate 3-D core model were defined. The analysis of the APROS calculation results showed that while the main results were in good accordance with the measured plant data, also differences were detected. These differences were found to be caused by deficiencies and uncertainties related to the calculation model. According to the results the reactor core and the feedwater systems cause most of the differences between the calculated and measured values. Based on these findings, it will be possible to develop the APROS model further to make it a reliable and accurate tool for the analysis of the operational transients and possible plant modifications.

A multicriteria model to assess tractors used in family agriculture

In recent years, public policy has been offering subsidized credit for machine purchase to family farmers. However, there is no methodological procedure to select a suitable tractor for these farmers' situation. In this way, we aimed to develop a selection model for smallholder farmers from Pelotas city region in the state of Rio Grande do Sul. Building a multicriteria model to aid decisions is divided into three main stages: structuring stage (identifying stakeholders, decisional context and model creation), evaluation stage (stakeholder preference quantification) and recommendation stage (choice selection). The Multicriteria method is able to identify and value the criteria used in tractor selection by regional family farmers. Six main evaluation areas were identified: operational cost (weight 0.20), purchase cost (weight 0.22), maintainability (weight 0.10), tractor capacity (weight 0.26), ergonomics (weight 0.14) and safety (weight 0.08). The best-rated tractor model (14.7 kW rated power) also was the one purchased by 53.3% of local families.

Repair of segmental bone defects with fiber-reinforced composite: a study of material development and an animal model on rabbits

The Repair of segmental defects in load-bearing long bones is a challenging task because of the diversity of the load affecting the area; axial, bending, shearing and torsional forces all come together to test the stability/integrity of the bone. The natural biomechanical requirements for bone restorative materials include strength to withstand heavy loads, and adaptivity to conform into a biological environment without disturbing or damaging it. Fiber-reinforced composite (FRC) materials have shown promise, as metals and ceramics have been too rigid, and polymers alone are lacking in strength which is needed for restoration. The versatility of the fiber-reinforced composites also allows tailoring of the composite to meet the multitude of bone properties in the skeleton. The attachment and incorporation of a bone substitute to bone has been advanced by different surface modification methods. Most often this is achieved by the creation of surface texture, which allows bone growth, onto the substitute, creating a mechanical interlocking. Another method is to alter the chemical properties of the surface to create bonding with the bone – for example with a hydroxyapatite (HA) or a bioactive glass (BG) coating. A novel fiber-reinforced composite implant material with a porous surface was developed for bone substitution purposes in load-bearing applications. The material’s biomechanical properties were tailored with unidirectional fiber reinforcement to match the strength of cortical bone. To advance bone growth onto the material, an optimal surface porosity was created by a dissolution process, and an addition of bioactive glass to the material was explored. The effects of dissolution and orientation of the fiber reinforcement were also evaluated for bone-bonding purposes. The Biological response to the implant material was evaluated in a cell culture study to assure the safety of the materials combined. To test the material’s properties in a clinical setting, an animal model was used. A critical-size bone defect in a rabbit’s tibia was used to test the material in a load-bearing application, with short- and long-term follow-up, and a histological evaluation of the incorporation to the host bone. The biomechanical results of the study showed that the material is durable and the tailoring of the properties can be reproduced reliably. The Biological response - ex vivo - to the created surface structure favours the attachment and growth of bone cells, with the additional benefit of bioactive glass appearing on the surface. No toxic reactions to possible agents leaching from the material could be detected in the cell culture study when compared to a nontoxic control material. The mechanical interlocking was enhanced - as expected - with the porosity, whereas the reinforcing fibers protruding from the surface of the implant gave additional strength when tested in a bone-bonding model. Animal experiments verified that the material is capable of withstanding load-bearing conditions in prolonged use without breaking of the material or creating stress shielding effects to the host bone. A Histological examination verified the enhanced incorporation to host bone with an abundance of bone growth onto and over the material. This was achieved with minimal tissue reactions to a foreign body. An FRC implant with surface porosity displays potential in the field of reconstructive surgery, especially regarding large bone defects with high demands on strength and shape retention in load-bearing areas or flat bones such as facial / cranial bones. The benefits of modifying the strength of the material and adjusting the surface properties with fiber reinforcement and bone-bonding additives to meet the requirements of different bone qualities are still to be fully discovered.

Safety study of hydrogen peroxide direct synthesis

Kandidaatintyön johdantokappaleessa esitellään vetyperoksidi ja mihin sitä käytetään teollisuudessa. Työssä vertaillaan antrakinoniprosessia ja suoraa prosessia sekä selvitetään nykyisin enemmän vetyperoksidituotantoon käytetyn antrakinoniprosessin ongelmakohdat ja osoitetaan, miksi suora synteesi vetyperoksidin tuotannossa olisi parempi vaihtoehto. Kandidaatintyön käsittelee suurilta osin turvallisuusongelmia, joita esiintyy suoran synteesin yhteydessä. Kirjallisuudesta on etsitty ratkaisuja näihin ongelmiin, kuten membraaniprosessin käyttöä räjähdysvaaran välttämiseksi. Pienemmän reaktorin eli ns. mikroreaktorin käyttö tuo mukanaan monia etuja vetyperoksidin tuotantoon. Tällöin prosessi on turvallisempi ja sitä on helpompi hallita. Mikroreaktorissa voidaan käyttää korkeampia lämpötiloja ja paineita kuin makroreaktorilla ilman, että räjähdysvaara prosessissa kasvaisi. Mikroreaktorin sisällä olevat mikrokanavat luovat turvallisen ympäristön synteesille. Aspen plus – simulointiohjelmalla mallinnettiin ja simulointiin suoran prosessin kriittisiä virtoja mikroreaktorissa. Tarkoituksena oli löytää virrat, joissa kulkee mahdollisesti räjähtävä kaasuseos. Kaasumaiset prosessivirrat ovat kriittisimmät vetyperoksidin suorassa synteesissä, koska ne aiheuttavat todennäköisemmin räjähdyksen kuin nestemäiset prosessivirrat. Kaikkein eniten prosessiturvallisuutta uhkaavat ainevirrat ennen ja jälkeen mikroreaktoria.

Licensing Model Development for Small Modular Reactors (SMRs) - Focusing on the Finnish Regulatory Framework

Recently, Small Modular Reactors (SMRs) have attracted increased public discussion. While large nuclear power plant new build projects are facing challenges, the focus of attention is turning to small modular reactors. One particular project challenge arises in the area of nuclear licensing, which plays a significant role in new build projects affecting their quality as well as costs and schedules. This dissertation - positioned in the field of nuclear engineering but also with a significant section in the field of systems engineering - examines the nuclear licensing processes and their suitability for the characteristics of SMRs. The study investigates the licensing processes in selected countries, as well as other safety critical industry fields. Viewing the licensing processes and their separate licensing steps in terms of SMRs, the study adopts two different analysis theories for review and comparison. The primary data consists of a literature review, semi-structured interviews, and questionnaire responses concerning licensing processes and practices. The result of the study is a recommendation for a new, optimized licensing process for SMRs. The most important SMR-specific feature, in terms of licensing, is the modularity of the design. Here the modularity indicates multi-module SMR designs, which creates new challenges in the licensing process. As this study focuses on Finland, the main features of the new licensing process are adapted to the current Finnish licensing process, aiming to achieve the main benefits with minimal modifications to the current process. The application of the new licensing process is developed using Systems Engineering, Requirements Management, and Project Management practices and tools. Nuclear licensing includes a large amount of data and documentation which needs to be managed in a suitable manner throughout the new build project and then during the whole life cycle of the nuclear power plant. To enable a smooth licensing process and therefore ensure the success of the new build nuclear power plant project, management processes and practices play a significant role. This study contributes to the theoretical understanding of how licensing processes are structured and how they are put into action in practice. The findings clarify the suitability of different licensing processes and their selected licensing steps for SMR licensing. The results combine the most suitable licensing steps into a new licensing process for SMRs. The results are also extended to the concept of licensing management practices and tools.

Anti-hyperalgesic effect of electroacupuncture in a model of post-incisional pain in rats

Electroacupuncture has been proposed to be a low cost and practical method that allows effective pain management with minimal collateral effects. In this study we have examined the effect of electroacupuncture against the hyperalgesia developed in a model of post-incisional pain in rats. A 1-cm longitudinal incision was made through the skin and fascia of the plantar region of the animal hind paw. Mechanical hyperalgesia in the incision was evaluated 135 min after the surgery with von Frey filaments. The tension threshold was reduced from 75 g (upper limit of the test) to 1.36 ± 0.36 g (mean ± SEM) in control rats. It is shown that a 15-min period of electroacupuncture applied 120 min after surgery to the Zusanli (ST36) and Sanyinjiao (SP6) points, but not to non-acupoints, produces a significant and long-lasting reduction of the mechanical hyperalgesia induced by the surgical incision of the plantar surface of the ipsilateral hind paw. The tension threshold was reduced from 75 to 27.6 ± 4.2 g in animals soon after the end of electroacupuncture. The mechanical threshold in this group was about 64% less than in control. Electroacupuncture was ineffective in rats treated 10 min earlier with naloxone (1 mg/kg, ip), thus confirming the involvement of opioid mechanisms in the antinociceptive effects of such procedure. The results indicate that post-incisional pain is a useful model for studying the anti-hyperalgesic properties of electroacupuncture in laboratory animals.

Rigorous development of safety-critical systems

Nowadays, computer-based systems tend to become more complex and control increasingly critical functions affecting different areas of human activities. Failures of such systems might result in loss of human lives as well as significant damage to the environment. Therefore, their safety needs to be ensured. However, the development of safety-critical systems is not a trivial exercise. Hence, to preclude design faults and guarantee the desired behaviour, different industrial standards prescribe the use of rigorous techniques for development and verification of such systems. The more critical the system is, the more rigorous approach should be undertaken. To ensure safety of a critical computer-based system, satisfaction of the safety requirements imposed on this system should be demonstrated. This task involves a number of activities. In particular, a set of the safety requirements is usually derived by conducting various safety analysis techniques. Strong assurance that the system satisfies the safety requirements can be provided by formal methods, i.e., mathematically-based techniques. At the same time, the evidence that the system under consideration meets the imposed safety requirements might be demonstrated by constructing safety cases. However, the overall safety assurance process of critical computerbased systems remains insufficiently defined due to the following reasons. Firstly, there are semantic differences between safety requirements and formal models. Informally represented safety requirements should be translated into the underlying formal language to enable further veri cation. Secondly, the development of formal models of complex systems can be labour-intensive and time consuming. Thirdly, there are only a few well-defined methods for integration of formal verification results into safety cases. This thesis proposes an integrated approach to the rigorous development and verification of safety-critical systems that (1) facilitates elicitation of safety requirements and their incorporation into formal models, (2) simplifies formal modelling and verification by proposing specification and refinement patterns, and (3) assists in the construction of safety cases from the artefacts generated by formal reasoning. Our chosen formal framework is Event-B. It allows us to tackle the complexity of safety-critical systems as well as to structure safety requirements by applying abstraction and stepwise refinement. The Rodin platform, a tool supporting Event-B, assists in automatic model transformations and proof-based verification of the desired system properties. The proposed approach has been validated by several case studies from different application domains.