Safety-critical medical device development using the UPP2SF model translation tool

Software-based control of life-critical embedded systems has become increasingly complex, and to a large extent has come to determine the safety of the human being. For example, implantable cardiac pacemakers have over 80,000 lines of code which are responsible for maintaining the heart within safe operating limits. As firmware-related recalls accounted for over 41% of the 600,000 devices recalled in the last decade, there is a need for rigorous model-driven design tools to generate verified code from verified software models. To this effect, we have developed the UPP2SF model-translation tool, which facilitates automatic conversion of verified models (in UPPAAL) to models that may be simulated and tested (in Simulink/Stateflow). We describe the translation rules that ensure correct model conversion, applicable to a large class of models. We demonstrate how UPP2SF is used in themodel-driven design of a pacemaker whosemodel is (a) designed and verified in UPPAAL (using timed automata), (b) automatically translated to Stateflow for simulation-based testing, and then (c) automatically generated into modular code for hardware-level integration testing of timing-related errors. In addition, we show how UPP2SF may be used for worst-case execution time estimation early in the design stage. Using UPP2SF, we demonstrate the value of integrated end-to-end modeling, verification, code-generation and testing process for complex software-controlled embedded systems. © 2014 ACM.

Operationalizing the social-ecological systems framework to assess sustainability.

Environmental governance is more effective when the scales of ecological processes are well matched with the human institutions charged with managing human-environment interactions. The social-ecological systems (SESs) framework provides guidance on how to assess the social and ecological dimensions that contribute to sustainable resource use and management, but rarely if ever has been operationalized for multiple localities in a spatially explicit, quantitative manner. Here, we use the case of small-scale fisheries in Baja California Sur, Mexico, to identify distinct SES regions and test key aspects of coupled SESs theory. Regions that exhibit greater potential for social-ecological sustainability in one dimension do not necessarily exhibit it in others, highlighting the importance of integrative, coupled system analyses when implementing spatial planning and other ecosystem-based strategies.

Safety and efficacy of drisapersen for the treatment of Duchenne muscular dystrophy (DEMAND II): an exploratory, randomised, placebo-controlled phase 2 study.

Duchenne muscular dystrophy is caused by dystrophin deficiency and muscle deterioration and preferentially affects boys. Antisense-oligonucleotide-induced exon skipping allows synthesis of partially functional dystrophin. We investigated the efficacy and safety of drisapersen, a 2'-O-methyl-phosphorothioate antisense oligonucleotide, given for 48 weeks.

Fire safety engineering and ship design using advanced fire and evacuation simulation

When designing a new passenger ship or modifying an existing design, how do we ensure that the proposed design and crew emergency procedures are safe from an evacuation resulting from fire or other incident? In the wake of major maritime disasters such as the Scandinavian Star, Herald of Free Enterprise, Estonia and in light of the growth in the number of high density, high-speed ferries and large capacity cruise ships, issues concerning the evacuation of passengers and crew at sea are receiving renewed interest. Fire and evacuation models with features such as the ability to realistically simulate the spread of heat and smoke and the human response to fire as well as the capability to model human performance in heeled orientations linked to a virtual reality environment that produces realistic visualisations of the modelled scenarios are now available and can be used to aid the engineer in assessing ship design and procedures. This paper describes the maritimeEXODUS ship evacuation and the SMARTFIRE fire simulation model and provides an example application demonstrating the use of the models in performing fire and evacuation analysis for a large passenger ship partially based on the requirements of MSC circular 1033

The airEXODUS evacuation model and its application to aircraft safety

Computer based mathematical models describing the aircraft evacuation process have a vital role to play in the design and development of safer aircraft, the implementation of safer and more rigorous certification criteria, in cabin crew training and post-mortem accident investigation. As the risk of personal injury and the costs involved in performing full-scale certification trials are high, the development and use of these evacuation modelling tools are essential. Furthermore, evacuation models provide insight into the evacuation process that is impossible to derive from a single certification trial. The airEXODUS evacuation model has been under development since 1989 with support from the UK CAA and the aviation industry. In addition to describing the capabilities of the airEXODUS evacuation model, this paper describes the findings of a recent CAA project aimed at investigating model accuracy in predicting past certification trials. Furthermore, airEXODUS is used to examine issues related to the Blended Wing Body (BWB) and Very Large Transport Aircraft (VLTA). These radical new aircraft concepts pose considerable challenges to designers, operators and certification authorities. BWB concepts involving one or two decks with possibly four or more aisles offer even greater challenges. Can the largest exits currently available cope with passenger flow arising from four or five aisles? Do we need to consider new concepts in exit design? Should the main aisle be made wider to accommodate more passengers? In this paper we discuss various issues evacuation related issues associated VLTA and BWB aircraft and demonstrate how computer based evacuation models can be used to investigage these issues through examination of aisle/exit configurations for BWB cabin layouts.

Safety issues with the South African Pebble Bed Modular Reactor: when were the issues apparent? A briefing paper

This is a briefing report on when the safety issues identified in a July 2008 report by Jülich should have become apparent In July 2008, the German Jülich nuclear research centre published a report entitled ‘A safety re-evaluation of the AVR pebble bed reactor operation and its consequences for future HTR concepts.’ It concluded: ‘pebble bed HTRs require additional safety related R&D effort and updating of safety analyses before construction.’

Long-Term Oceanographic and Ecological Research in the Western English Channel

Long-term research in the western English Channel, undertaken by the marine laboratories in Plymouth, is described and details of survey methods, sites, and time series given in this chapter. Major findings are summarized and their limitations outlined. Current research, with recent reestablishment and expansion of many sampling programmes, is presented, and possible future approaches are indicated. These unique long-term data sets provide an environmental baseline for predicting complex ecological responses to local, regional, and global environmental change. Between 1888 and the present, investigations have been carried out into the physical, chemical, and biological components (ranging from plankton and fish to benthic and intertidal assemblages) of the western English Channel ecosystem. The Marine Biological Association of the United Kingdom has performed the main body of these observations. More recent contributions come from the Continuous Plankton Recorder Survey, now the Sir Alister Hardy Foundation for Ocean Science, dating from 1957; the Institute for Marine Environmental Research, from 1974 to 1987; and the Plymouth Marine Laboratory, which was formed by amalgamation of the Institute for Marine Environmental Research and part of the Marine Biological Association, from 1988. Together, these contributions constitute a unique data series; one of the longest and most comprehensive samplings of environmental and marine biological variables in the world. Since the termination of many of these time series in 1987-1988 during a reorganisation of UK marine research, there has been a resurgence of interest in long-term environmental change. Many programmes have been restarted and expanded with support from several agencies. The observations span significant periods of warming (1921-1961; 1985-present) and cooling (1962-1980). During these periods of change, the abundance of key species underwent dramatic shifts. The first period of warming saw changes in zooplankton, pelagic fish, and larval fish, including the collapse of an important herring fishery. During later periods of change, shifts in species abundances have been reflected in other assemblages, such as the intertidal zone and the benthic fauna. Many of these changes appear to be related to climate, manifested as temperature changes, acting directly or indirectly. The hypothesis that climate is a forcing factor is widely supported today and has been reinforced by recent studies that show responses of marine organisms to climatic attributes such as the strength of the North Atlantic Oscillation. The long-term data also yield important insights into the effects of anthropogenic disturbances such as fisheries exploitation and pollution. Comparison of demersal fish hauls over time highlights fisheries effects not only on commercially important species but also on the entire demersal community. The effects of acute ("Torrey Canyon" oil spill) and chronic (tributyltin [TBT] antifoulants) pollution are clearly seen in the intertidal records. Significant advances in diverse scientific disciplines have been generated from research undertaken alongside the long-term data series.

Is there a connection between high transport of water through the Rockall Trough and ecological changes in the North Sea?

Changes in the ecosystem of the North Sea may occur as pronounced inter-annual and step-wise shifts as well as gradual trends. Marked inter-annual shifts have occurred at least twice in the last two decades, the late 1980s and the late 1990s, that appear to reflect an increased inflow of oceanic water and species. Numerical modelling has demonstrated a link between altered rates of inflow of oceanic water into the northern North Sea and a regime shift after 1988. In 1989 and 1997 oceanic species not normally found in the North Sea were observed there, suggesting pulses of oceanic water had entered the basin and triggered the subsequent ecosystem change. The oceanic water has origins mainly west of Britain in the Rockall Trough, where the long-term mean volume transport is around 3.7Sv northwards (1Sv=10 super(6)m super(3)s super(1)), but in early 1989 and early 1998 was observed to be more than twice the mean value, reaching over 7Sv. These periods of high transport coinciding with the inferred pulses of oceanic water into the North Sea suggest a connection through the continental shelf edge current. Copyright 2001 International Council for the Exploration of the Sea