Skip to Main content Skip to Navigation
Conference papers

Specifying Safety Monitors for Autonomous Systems using Model-checking

Abstract : Autonomous systems operating in the vicinity of humans are critical in that they potentially harm humans. As the complexity of autonomous system software makes the zero-fault objective hardly at- tainable, we adopt a fault-tolerance approach. We consider a separate safety channel, called a monitor, that is able to partially observe the sys- tem and to trigger safety-ensuring actuations. A systematic process for specifying a safety monitor is presented. Hazards are formally modeled, based on a risk analysis of the monitored system. A model-checker is used to synthesize monitor behavior rules that ensure the safety of the monitored system. Potentially excessive limitation of system functional- ity due to presence of the safety monitor is addressed through the notion of permissiveness. Tools have been developed to assist the process.
Document type :
Conference papers
Complete list of metadata
Contributor : Mathilde Machin <>
Submitted on : Friday, October 2, 2015 - 10:22:59 AM
Last modification on : Thursday, June 10, 2021 - 3:01:32 AM
Long-term archiving on: : Sunday, January 3, 2016 - 10:13:14 AM


Files produced by the author(s)


  • HAL Id : hal-01207152, version 1


Mathilde Machin, Fanny Dufossé, Jean-Paul Blanquart, Jérémie Guiochet, David Powell, et al.. Specifying Safety Monitors for Autonomous Systems using Model-checking. International Conference on Computer Safety, Reliability and Security (SafeComp 2014), Sep 2014, Florence, Italy. ⟨hal-01207152⟩



Record views


Files downloads