Safety-critical medical device development using the UPP2SF model translation tool

Software-based control of life-critical embedded systems has become increasingly complex, and to a large extent has come to determine the safety of the human being. For example, implantable cardiac pacemakers have over 80,000 lines of code which are responsible for maintaining the heart within safe operating limits. As firmware-related recalls accounted for over 41% of the 600,000 devices recalled in the last decade, there is a need for rigorous model-driven design tools to generate verified code from verified software models. To this effect, we have developed the UPP2SF model-translation tool, which facilitates automatic conversion of verified models (in UPPAAL) to models that may be simulated and tested (in Simulink/Stateflow). We describe the translation rules that ensure correct model conversion, applicable to a large class of models. We demonstrate how UPP2SF is used in themodel-driven design of a pacemaker whosemodel is (a) designed and verified in UPPAAL (using timed automata), (b) automatically translated to Stateflow for simulation-based testing, and then (c) automatically generated into modular code for hardware-level integration testing of timing-related errors. In addition, we show how UPP2SF may be used for worst-case execution time estimation early in the design stage. Using UPP2SF, we demonstrate the value of integrated end-to-end modeling, verification, code-generation and testing process for complex software-controlled embedded systems. © 2014 ACM.

Safety and efficacy of drisapersen for the treatment of Duchenne muscular dystrophy (DEMAND II): an exploratory, randomised, placebo-controlled phase 2 study.

Duchenne muscular dystrophy is caused by dystrophin deficiency and muscle deterioration and preferentially affects boys. Antisense-oligonucleotide-induced exon skipping allows synthesis of partially functional dystrophin. We investigated the efficacy and safety of drisapersen, a 2'-O-methyl-phosphorothioate antisense oligonucleotide, given for 48 weeks.

Fire safety engineering and ship design using advanced fire and evacuation simulation

When designing a new passenger ship or modifying an existing design, how do we ensure that the proposed design and crew emergency procedures are safe from an evacuation resulting from fire or other incident? In the wake of major maritime disasters such as the Scandinavian Star, Herald of Free Enterprise, Estonia and in light of the growth in the number of high density, high-speed ferries and large capacity cruise ships, issues concerning the evacuation of passengers and crew at sea are receiving renewed interest. Fire and evacuation models with features such as the ability to realistically simulate the spread of heat and smoke and the human response to fire as well as the capability to model human performance in heeled orientations linked to a virtual reality environment that produces realistic visualisations of the modelled scenarios are now available and can be used to aid the engineer in assessing ship design and procedures. This paper describes the maritimeEXODUS ship evacuation and the SMARTFIRE fire simulation model and provides an example application demonstrating the use of the models in performing fire and evacuation analysis for a large passenger ship partially based on the requirements of MSC circular 1033

The airEXODUS evacuation model and its application to aircraft safety

Computer based mathematical models describing the aircraft evacuation process have a vital role to play in the design and development of safer aircraft, the implementation of safer and more rigorous certification criteria, in cabin crew training and post-mortem accident investigation. As the risk of personal injury and the costs involved in performing full-scale certification trials are high, the development and use of these evacuation modelling tools are essential. Furthermore, evacuation models provide insight into the evacuation process that is impossible to derive from a single certification trial. The airEXODUS evacuation model has been under development since 1989 with support from the UK CAA and the aviation industry. In addition to describing the capabilities of the airEXODUS evacuation model, this paper describes the findings of a recent CAA project aimed at investigating model accuracy in predicting past certification trials. Furthermore, airEXODUS is used to examine issues related to the Blended Wing Body (BWB) and Very Large Transport Aircraft (VLTA). These radical new aircraft concepts pose considerable challenges to designers, operators and certification authorities. BWB concepts involving one or two decks with possibly four or more aisles offer even greater challenges. Can the largest exits currently available cope with passenger flow arising from four or five aisles? Do we need to consider new concepts in exit design? Should the main aisle be made wider to accommodate more passengers? In this paper we discuss various issues evacuation related issues associated VLTA and BWB aircraft and demonstrate how computer based evacuation models can be used to investigage these issues through examination of aisle/exit configurations for BWB cabin layouts.

Safety issues with the South African Pebble Bed Modular Reactor: when were the issues apparent? A briefing paper

This is a briefing report on when the safety issues identified in a July 2008 report by Jülich should have become apparent In July 2008, the German Jülich nuclear research centre published a report entitled ‘A safety re-evaluation of the AVR pebble bed reactor operation and its consequences for future HTR concepts.’ It concluded: ‘pebble bed HTRs require additional safety related R&D effort and updating of safety analyses before construction.’

Climate change and food safety: A review

Climate change and variability may have an impact on the occurrence of food safety hazards at various stages of the food chain, from primary production through to consumption. There are multiple pathways through which climate related factors may impact food safety including: changes in temperature and precipitation patterns, increased frequency and intensity of extreme weather events, ocean warming and acidification, and changes in contaminants’ transport pathways among others. Climate change may also affect socio-economic aspects related to food systems such as agriculture, animal production, global trade, demographics and human behaviour which all influence food safety. This paper reviews the potential impacts of predicted changes in climate on food contamination and food safety at various stages of the food chain and identifies adaptation strategies and research priorities to address food safety implications of climate change. The paper concludes that there is a need for intersectoral and international cooperation to better understand the changing food safety situation and in developing and implementing adaptation strategies to address emerging risks associated with climate change.

Design-Build Experiences and Student Safety

Design-build experiences (DBEs) are an essential element of any programme based on the CDIO methodology. They enable students to develop practical hands-on skills, they enable the learning of theory by stealth and they provide a forum for developing professional skills such as team working and project management. The hands-on aspect of certain DBEs has significant risk associated with it, which must be addressed through the formal evaluation of risks and the development of a methodology for controlling them. This paper considers the aspects of design-build experiences that may impact on student safety. In particular, it examines the risk associated with each of the four stages of CDIO and gives examples of risks which may commonly apply across engineering disciplines. A system for assessing and controlling the risks in any particular DBE is presented and the paper finishes by discussing the significance of health and safety in the educational environment.