Safety and Security Analysis of AEB for L4 Autonomous Vehicle Using STPA

Shefali Sharma, Adan Flores, Chris Hobbs, Jeff Stafford, Sebastian Fischmeister, Michael Wagner
2019 Design, Automation, and Test in Europe  
Autonomous vehicles (AVs) are coming to our streets. Due to the presence of highly complex software systems in AVs, there is a need for a new hazard analysis technique to meet stringent safety standards. System Theoretic Process Analysis (STPA), based on Systems Theoretic Accident Modeling and Processes (STAMP), is a powerful tool that can identify, define, analyze and mitigate hazards from the earliest conceptual stage deployment to the operation of a system. Applying STPA to autonomous
more » ... s demonstrates STPA s applicability to preliminary hazard analysis, alternative available, developmental tests, organizational design, and functional design of each unique safety operation. This paper describes the STPA process used to generate system design requirements for an Autonomous Emergency Braking (AEB) system using a top-down analysis approach to system safety. The paper makes the following contributions to practicing STPA for safety and security: 1. It describes the incorporation of safety and security analysis in one process and discusses the benefits of this; 2. It provides an improved, structural approach for scenario analysis, concentrating on safety and security; 3. It demonstrates the utility of STPA for gap analysis of existing designs in the automotive domain; 4. It provides lessons learned throughout the process of applying STPA and STPA-Sec 1 .
doi:10.4230/oasics.asd.2019.5 dblp:conf/date/SharmaFHSF19 fatcat:d27lulck2rhzlbrkmndwf7kcda