{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,24]],"date-time":"2026-04-24T16:38:38Z","timestamp":1777048718911,"version":"3.51.4"},"reference-count":40,"publisher":"MDPI AG","issue":"2","license":[{"start":{"date-parts":[[2021,2,12]],"date-time":"2021-02-12T00:00:00Z","timestamp":1613088000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Information"],"abstract":"<jats:p>In this study, we proposed a method to improve the safety level of control software (CSW) by managing the CSW\u2019s design information and safety analysis results, and combining failure mode and effects analysis (FMEA) and fault tree analysis (FTA). Here, the CSW is developed using structured analysis and design methodology. In the upper stage of the CSW\u2019s development process, as the input of the preliminary design information (data flow diagrams (DFDs) and control flow diagrams (CFDs)), the causes of undesirable events of the CSW are clarified by FMEA, and the countermeasures are reflected in the preliminary design information. In the lower stage of the CSW\u2019s development process, as the inputs of the detailed design information (DFDs and CFDs in the lower level) and programs, the causes of the specific undesirable event are clarified by FTA, and the countermeasures are reflected in the detailed design specifications and programs. The processes are repeated until the impact of undesirable events become the acceptable safety level. By applying the proposed method to the CSW installed into a communication control equipment on the space system, we clarified several undesirable events and adopted adequate countermeasures. Consequently, a safer CSW is developed by applying the proposed method.<\/jats:p>","DOI":"10.3390\/info12020079","type":"journal-article","created":{"date-parts":[[2021,2,12]],"date-time":"2021-02-12T22:41:25Z","timestamp":1613169685000},"page":"79","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["A Safety Analysis Method for Control Software in Coordination with FMEA and FTA"],"prefix":"10.3390","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1778-9119","authenticated-orcid":false,"given":"Masakazu","family":"Takahashi","sequence":"first","affiliation":[{"name":"Department of Computer Science and Engineering, University of Yamanashi, 400-8511 Kofu, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunarso","family":"Anang","sequence":"additional","affiliation":[{"name":"Department of Computational Statistics, Politeknik Statistika STIS, 13330 Jakarta, Indonesia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yoshimichi","family":"Watanabe","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Yamanashi, 400-8511 Kofu, Japan"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,2,12]]},"reference":[{"key":"ref_1","unstructured":"WIRED (2021, January 19). Google\u2019s Self-Driving Car Caused Its First Crash. Available online: https:\/\/www.wired.com\/2016\/02\/googles-self-driving-car-may-caused-first-crash."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1109\/MC.1993.274940","article-title":"An Investigation of the Therac-25 accidents","volume":"26","author":"Leveson","year":"1993","journal-title":"IEEE Comput."},{"key":"ref_3","unstructured":"Japan Aerospace Exploration Agency (JAXA) (2021, January 19). Operation Plan of X-ray Astronomy Satellite ASTRO-H (Hitomi). (detailed report; (In Japanese))."},{"key":"ref_4","unstructured":"International Electro Technical Commission (2006). International IEC Standard ICE 60812:2006, Analysis Techniques for System Reliability\u2013Procedure for Failure Mode and Effects Analysis (FMEA), International Electrotechnical Commission."},{"key":"ref_5","unstructured":"International Electro Technical Commission (2006). International IEC Standard ICE 61025:2006, Fault Tree Analysis, International Electrotechnical Commission."},{"key":"ref_6","unstructured":"Hatley, D., and Pirbhai, I. (1988). Strategies for Real-Time System Specification, Dorset House Publication."},{"key":"ref_7","unstructured":"Information-Technology Promotion Agency, Japan (2017). Software Reliability Enhancement Center, White Paper of Embedded Software Development 2017, Information-Technology Promotion Agency Japan. (In Japanese)."},{"key":"ref_8","unstructured":"International Electro Technical Commission (2010). International IEC Standard ICE 61508, Functional Safety of Electrical\/Electronic\/Programmable Electronic Safety-Related Systems, International Electrotechnical Commission."},{"key":"ref_9","unstructured":"International Organization for Standardization (2011). ISO26262 Road Vehicles\u2013Functional Safety, International Organization for Standardization."},{"key":"ref_10","unstructured":"International Electro Technical Commission (2016). International IEC Standard ICE 61882:2001 Hazard and Operability Studies, International Electrotechnical Commission."},{"key":"ref_11","unstructured":"International Electro Technical Commission (2016). International IEC Standard ICE 82304-1 Health Software\u2014Part 1: General Requirements for Product Safety, International Electrotechnical Commission."},{"key":"ref_12","unstructured":"International Society for Pharmaceutical Engineering (2008). GAMP5 A Risk-Based Approach to Compliant GxP Computerized Systems, International Society for Pharmaceutical Engineering."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"285","DOI":"10.9746\/sicetr.48.285","article-title":"A proposal of operational risk management method using FMEA for drug manufacturing computerized system","volume":"48","author":"Takahashi","year":"2012","journal-title":"Trans. Soc. Instrum. Control Eng."},{"key":"ref_14","first-page":"461","article-title":"Reduction of Software Bugs using FMEA, Japanese Software Quality Control -Case Studies","volume":"1990","author":"Morita","year":"1990","journal-title":"Union Jpn. Sci. Eng."},{"key":"ref_15","first-page":"467","article-title":"Improvement of Reliability for System Design using FMEA, Japanese Software Quality Control -Case Studies-","volume":"1990","author":"Niwa","year":"1990","journal-title":"Union Jpn. Sci. Eng."},{"key":"ref_16","unstructured":"Goddard, L. (1993, January 26\u201328). Validating the Safety of Embedded Real-Time Control Systems Using FMEA. Proceedings of the Annual Reliability and Maintainability Symposium, Atlanta, GA, USA."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Snooke, N., and Price, C. (2011, January 24\u201327). Model-driven automated software FMEA. Proceedings of the Reliability and Maintainability Symposium, Reliability and Maintainability Symposium, Lake Buena Vista, FL, USA.","DOI":"10.1109\/RAMS.2011.5754453"},{"key":"ref_18","first-page":"19","article-title":"Software Failure Analysis using FMEA","volume":"12","author":"Lazarus","year":"2018","journal-title":"Int. J. Softw. Eng. Appl."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Kim, H. (2014, January 1\u20135). SW FMEA for ISO-26262 Software Development. Proceedings of the APSEC2014, 2014 21st Asia-Pacific Software Engineering Conference (APSEC), Santiago, Chile.","DOI":"10.1109\/APSEC.2014.85"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Batbayar, K. (2016, January 12\u201314). Medical device software risk assessment using FMEA and fuzzy linguistic approach: Case study. Proceedings of the SACI, 2016 IEEE 11th International Symposium on Applied Computational Intelligence and Informatics (SACI), Timisoara, Romania.","DOI":"10.1109\/SACI.2016.7507369"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"3441","DOI":"10.1007\/s00170-017-0110-y","article-title":"Optimized fault diagnosis based on FMEA-style CBR and BN for embedded software system","volume":"94","author":"Yang","year":"2018","journal-title":"Int. J. Adv. Manuf. Technol."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Weber, W., Tondok, H., and Bachmayer, M. (2003, January 24\u201326). Enhancing Software Safety by Fault Trees: Experiences from an Application to Flight Critical SW. Proceedings of the SAFECOMP2003, SAFECOMP, Edinburgh, UK.","DOI":"10.1007\/978-3-540-39878-3_23"},{"key":"ref_23","unstructured":"Friedman, M. (1993, January 26\u201328). Automated Software Fault Tree Analysis for Pascal Program. Proceedings of the Annual Reliability and Maintainability Symposium, Atlanta, GA, USA."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"569","DOI":"10.1109\/TSE.1983.235116","article-title":"Analyzing Software Safety","volume":"9","author":"Leveson","year":"1983","journal-title":"IEEE Trans. Softw. Eng."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Takahashi, M., and Nanba, R. (2014, January 9\u201312). A Proposal of Fault Tree Analysis for Control Programs. Proceedings of the SICE 2014, Hokkaido, Japan.","DOI":"10.1109\/SICE.2014.6935296"},{"key":"ref_26","first-page":"1","article-title":"An Experimental Safety Analysis using FTA for A Ball Position Control System","volume":"4","author":"Kumar","year":"2016","journal-title":"J. Netw. Inf. Secur."},{"key":"ref_27","first-page":"11","article-title":"Design Safe Software via UML-based SFTA in Cyber Physical Systems","volume":"1","author":"Oveisi","year":"2020","journal-title":"J. Appl. Intell. Syst. Inf. Sci."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"107064","DOI":"10.1016\/j.ress.2020.107064","article-title":"A Software Fault Tree Analysis Technique for Formal Requirement Specifications of Nuclear Reactor Protection Systems","volume":"203","author":"Junga","year":"2020","journal-title":"Reliab. Eng. Syst. Saf."},{"key":"ref_29","unstructured":"Hansen, K., Wells, L., and Maier, T. (2004, January 19\u201320). HAZOP Analysis of UML-Based Software Architecture Descriptions of Safety-Critical. Proceedings of the NWUML 2004, 2nd Nordic Workshop on the Unified Modeling Language, Turku, Finland."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Guiochet, J. (2016). Hazard Analysis of Human\u2013Robot Interactions with HAZOP\u2013UML, Elsevier. Safety Science.","DOI":"10.1016\/j.ssci.2015.12.017"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Kaleeswaran, A., Munk, P., Sarkic, S., Vogel, T., and Nordmann, A. (2019, January 16\u201318). A Domain Specific Language to Support HAZOP Studies of SysML Models. Proceedings of the International Symposium on Model-Based Safety and Assessment, IMBSA 2019: Model-Based Safety and Assessment, Tessaloniki, Greece.","DOI":"10.1007\/978-3-030-32872-6_4"},{"key":"ref_32","unstructured":"Abdulkhaleq, A., and Wagner, S. (2013, January 26\u201328). Experiences with Applying STPA to Software-Intensive Systems in the Automotive Domain. Proceedings of the 2013 STAMP Workshop, Cambridge, MA, USA."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"399","DOI":"10.1016\/j.proeng.2014.09.097","article-title":"Software Safety Testing Based on STPA","volume":"80","author":"Yang","year":"2014","journal-title":"Procedia Eng."},{"key":"ref_34","unstructured":"Nakao, H., Katahira, M., Miyamoto, Y., and Leveson, N. (2011, January 17\u201319). Safety Guided Design of Crew Return Vehicle in Concept Design Phase Using STAMP\/STPA. Proceedings of the 5th IAASS Conference A safer space for a safer world\u2019, The 5th IAASS Conference A safer space for a safer world, Versailles, France."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Hong, Z., and Binbin, L. (2009, January 25\u201326). Integrated Analysis of Software FMEA and FTA. Proceedings of the 2009 International Conference on Information Technology and Computer Science, 2009 International Conference on Information Technology and Computer Science, Kiev, Ukraine.","DOI":"10.1109\/ITCS.2009.254"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1504\/IJCIS.2017.083632","article-title":"Analysis of software safety and reliability methods in cyber physical systems","volume":"13","author":"Oveisi","year":"2017","journal-title":"Int. J. Crit. Infrastruct."},{"key":"ref_37","unstructured":"International Organization for Standardization (1997). ISO\/IEC 2382-14: 1997, Information Technology\u2013Vocabulary\u2013Part 14: Reliability, Maintainability and Availability, International Organization for Standardization."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Takahashi, M., Anang, Y., and Watanabe, Y. (2020). A Proposal of Fault Tree Analysis for Embedded Control Software. Information, 11.","DOI":"10.3390\/info11090402"},{"key":"ref_39","unstructured":"Space System Safety and Mission Guarantee Committee (2016). Space System Safety and Mission Guarantee; Chapter 5 Software Safety and Mission Guarantee, Union of Japanese Scientists and Engineers. (In Japanese)."},{"key":"ref_40","unstructured":"Hollnagel, E. (2004). Barriers and Accident Prevention, Tayer & Francis."}],"container-title":["Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2078-2489\/12\/2\/79\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:23:30Z","timestamp":1760160210000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2078-2489\/12\/2\/79"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,2,12]]},"references-count":40,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2021,2]]}},"alternative-id":["info12020079"],"URL":"https:\/\/doi.org\/10.3390\/info12020079","relation":{},"ISSN":["2078-2489"],"issn-type":[{"value":"2078-2489","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,2,12]]}}}