{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,2]],"date-time":"2026-01-02T07:47:39Z","timestamp":1767340059736,"version":"build-2065373602"},"reference-count":24,"publisher":"MDPI AG","issue":"9","license":[{"start":{"date-parts":[[2020,8,19]],"date-time":"2020-08-19T00:00:00Z","timestamp":1597795200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>There are many industrial products in our life, and the actions of those products are controlled by embedded control software (ECSW). Recently, many troubles have been caused by ECSW. To avoid those troubles, it is necessary to clarify the causes of the troubles and take countermeasures. However, the results of those tasks depend on the skills of the analyst. This paper proposes an analytic method that clarifies the causes of troubles by applying fault tree analysis (FTA) to the ECSW. The characteristics of the proposed method are as follows: Preparation of fault tree templates (FTTs) corresponding to instructions of the ECSW, and definition of the FT development rules by combining FTTs according to the back-tracing of the instruction execution process. By complying with the proposed method strictly, when an analyst who has studied computer science and safety engineering for 2\u20133 years conducts FTA, the analyst can obtain an appropriate result of FTA. This indicates that the safety level of ECSW will improve. As a result of applying the proposed method to existing ECSWs, we find that we can obtain the result of FTA at the appropriate level.<\/jats:p>","DOI":"10.3390\/info11090402","type":"journal-article","created":{"date-parts":[[2020,8,19]],"date-time":"2020-08-19T21:37:40Z","timestamp":1597873060000},"page":"402","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["A Proposal of Fault Tree Analysis for Embedded Control Software"],"prefix":"10.3390","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1778-9119","authenticated-orcid":false,"given":"Masakazu","family":"Takahashi","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, University of Yamanashi, Kofu, Yamanashi 400-8511, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunarso","family":"Anang","sequence":"additional","affiliation":[{"name":"Department of Computational Statistics, Politeknik Statistika STIS, East Jakarta 13330, Indonesia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yoshimichi","family":"Watanabe","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Yamanashi, Kofu, Yamanashi 400-8511, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,8,19]]},"reference":[{"key":"ref_1","unstructured":"Information-Technology Promotion Agency, Japan (2017). Software Reliability Enhancement Center, White Paper of Embedded Software Development 2017, Information-Technology Promotion Agency, Japan. (In Japanese)."},{"key":"ref_2","unstructured":"Japanese Standards Association (2017). JIS T2304 Medical Device Software\u2014Software Lifecycle Process, Japanese Standards Association. (In Japanese)."},{"key":"ref_3","unstructured":"International Electro Technical Commission (2006). International IEC Standard ICE 62304 Medical Device Software, International Electro Technical Commission."},{"key":"ref_4","unstructured":"International Electro Technical Commission (2016). International IEC Standard ICE 82304-1 Health Software\u2014Part 1: General Requirements for Product Safety, International Electrotechnical Commission."},{"key":"ref_5","unstructured":"International Society for Pharmaceutical Engineering (2008). GAMP5 A Risk-Based Approach to Compliant GxP Computerized Systems, International Society for Pharmaceutical Engineering."},{"key":"ref_6","unstructured":"International Organization for Standardization (2011). ISO26262 Road Vehicles\u2014Functional Safety, International Organization for Standardization."},{"key":"ref_7","unstructured":"Radio Technical Commission for Aeronautics (2011). DO-178C Software Considerations in Airborne Systems and Equipment Certification, Radio Technical Commission for Aeronautics."},{"key":"ref_8","unstructured":"Japan Aerospace Exploration Agency (2008). JAXA JMR001, System Safety Standard, Japan Aerospace Exploration Agency. (In Japanese)."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"285","DOI":"10.9746\/sicetr.48.285","article-title":"A proposal of operational risk management method using FMEA for drug manufacturing computerized system","volume":"48","author":"Takahashi","year":"2012","journal-title":"Trans. Soc. Instrum. Control Eng."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Weber, W., Tondok, H., and Bachmayer, M. (2003, January 23\u201326). Enhancing Software Safety by Fault Trees: Experiences from an Application to Flight Critical SW. Proceedings of the SAFECOMP2003, Scotland, UK.","DOI":"10.1007\/978-3-540-39878-3_23"},{"key":"ref_11","unstructured":"Thapliya, A., and Kwon, G. (2017, January 27\u201329). A Unified Approach for UML Based Safety Oriented Level Crossing Using FTA and Model Checking. Proceedings of the 19th Korea Conference on Software Engineering, Busan, Korea."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"569","DOI":"10.1109\/TSE.1983.235116","article-title":"Analyzing Software Safety","volume":"9","author":"Leveson","year":"1983","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/52.300036","article-title":"Safety verification of Ada programs using software fault tree analysis","volume":"8","author":"Leveson","year":"1991","journal-title":"IEEE Softw."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Takahashi, M., and Nanba, R. (2014, January 9\u201312). A Proposal of Fault Tree Analysis for Control Programs. Proceedings of the SICE 2014, Hokkaido, Japan.","DOI":"10.1109\/SICE.2014.6935296"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"397","DOI":"10.5516\/NET.2008.40.5.397","article-title":"Fault tree analysis of KNICS RPS software","volume":"40","author":"Park","year":"2008","journal-title":"Nucl. Eng. Technol."},{"key":"ref_16","unstructured":"Hansen, K., and Wells, L. (2004, January 19\u201320). Hazop analysis of UML-based software architecture descriptions of safety-critical systems. Proceedings of the NWUML2004, Turku, Finland."},{"key":"ref_17","unstructured":"Hulun, B., and Tschachtli, R. (2011, January 17\u201322). Identifying software hazards with a modified CHAZOP. Proceedings of the PESARO2011, Budapest, Hungary."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"562","DOI":"10.2514\/1.24677","article-title":"Engineering spacecraft mission software using a model-based and safety-driven design methodology","volume":"3","author":"Weiss","year":"2006","journal-title":"J. Aerosp. Comput. Inf. Commun."},{"key":"ref_19","unstructured":"Takahashi, M., Anang, Y., and Watanabe, Y. (2019, January 10\u201312). A proposal for a hazard analysis method for embedded control software using STPA. Proceedings of the SICE 2019, Hiroshima, Japan."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Kloos, J., Hussain, T., and Eschbach, R. (2011, January 21\u201325). Risk-based Testing of Safety-Critical Embedded Systems Driven by Fault Tree Analysis. Proceedings of the Fourth International Conference on Software Testing, Verification and Validation Workshops, Berlin, Germany.","DOI":"10.1109\/ICSTW.2011.90"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Chen, D., Mahmud, N., Walker, M., Feng, L., Lonn, H., and Papadopoulos, Y. (2013, January 4\u20136). System Modeling with EAST-ADL for Fault Tree Analysis through Hip-HOPS. Proceedings of the IFAC Workshop on Dependable Control of Discrete Systems, York, UK.","DOI":"10.3182\/20130904-3-UK-4041.00043"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Trawczynski, D., Sosnowski, J., and Gawkowski, P. (2010). Testing Distributed ABS System with Fault Injection. Innovations in Computing Sciences and Software Engineering, Springer.","DOI":"10.1007\/978-90-481-9112-3_34"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Dabboussi, R., Kouta, R., Gaber, J., Wack, M., Hassan, B., and Nachabeh, L. (2018, January 18\u201320). Fault Tree Analysis for the Intelligent Vehicular Networks. Proceedings of the 2018 IEEE Middle East and North Africa Communications Conference, Jounieh, Lebanon.","DOI":"10.1109\/MENACOMM.2018.8371027"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"352","DOI":"10.1109\/TSE.1984.5010248","article-title":"Program Slicing","volume":"10","author":"Weiser","year":"1984","journal-title":"IEEE Trans. Softw. Eng."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/11\/9\/402\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:03:34Z","timestamp":1760177014000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/11\/9\/402"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,19]]},"references-count":24,"journal-issue":{"issue":"9","published-online":{"date-parts":[[2020,9]]}},"alternative-id":["info11090402"],"URL":"https:\/\/doi.org\/10.3390\/info11090402","relation":{},"ISSN":["2078-2489"],"issn-type":[{"type":"electronic","value":"2078-2489"}],"subject":[],"published":{"date-parts":[[2020,8,19]]}}}