SSS 13 PROGRAMME. SCSC 21 st Annual Symposium. Safety-critical Systems Symposium Marriott Royal Hotel, Bristol. 5 th - 7 th February 2013

Size: px

Start display at page:

Download "SSS 13 PROGRAMME. SCSC 21 st Annual Symposium. Safety-critical Systems Symposium Marriott Royal Hotel, Bristol. 5 th - 7 th February 2013"

Damon May
5 years ago
Views:

SCSC 21 st Annual Symposium Safety-critical Systems Symposium 2013 SSS 13 The Safety-Critical Systems Club welcomes delegates to its Twenty First annual Symposium The

Indeed, it is a vital characteristic for very many systems, and this remains as true in the 21st century as it was in the 20th.

Each year, in early February, we have held the Club's annual symposium SSS.

a summary is given here but; for more details please see the following pages.

Specific and note-worthy features will be: A day (Tuesday) homing in on certification; Four keynote presentations; Delegate participation throughout, especially via a

1 SCSC 21 st Annual Symposium Safety-critical Systems Symposium 2013 SSS 13 The Safety-Critical Systems Club welcomes delegates to its Twenty First annual Symposium The status of safety as a critical requirement for system engineers is enduring. Indeed, it is a vital characteristic for very many systems, and this remains as true in the 21st century as it was in the 20th. The Safety-Critical Systems Club has operated in support of our colleagues in the safety community since l991. Each year, in early February, we have held the Club's annual symposium SSS. This document is the a first draft of the programme for the 21 st Club Symposium; to mark and celebrate that coming of age anniversary we have augmented the normal format a summary is given here but; for more details please see the following pages. First and foremost, SSS 13 will offer three full days of presentations covering key themes in the safety-critical area. Specific and note-worthy features will be: A day (Tuesday) homing in on certification; Four keynote presentations; Delegate participation throughout, especially via a panel session and a version of Question Time ; Tools and services exhibition (Tuesday evening and Wednesday); Whisky tasting reception; Symposium banquet. Of particular interest, the banquet will conclude with an after dinner talk from Sir Charles Haddon-Cave, the author of the report on the loss of Nimrod XV230. We hope you will be able to join us in Bristol for what promises to be another highly stimulating and informative event. PROGRAMME Prof Tom Anderson, CSR, Newcastle University Marriott Royal Hotel, Bristol 5 th - 7 th February River Avon & Clifton Suspension Bridge SS Great Britain

2 THE SAFETY-CRITICAL SYSTEMS CLUB announces its Twenty First Annual Safety-critical Systems Symposium (SSS 13) Overview The programme encompasses three days of presentations, keynote talks, a panel session, question time and an exhibition. On the following pages you can read more about the keynote speakers, question time, exhibition and social programme, and details of the presentations in the symposium programme. Tuesday 5 th February: Five papers and closing panel session, with a distinctive focus on certification issues. An evening reception with canapés and a whisky tasting (plus alternative refreshments), to be held in the exhibition space. Wednesday 6 th February: Eight papers, plus Question Time, including two keynote addresses: Generating Formal Model-Based Safety Requirements for Complex, Software- and Human-Intensive Systems Nancy Leveson, Massachusetts Institute of Technology, USA and Safety Case Approach for the Victoria Line Resignalling Project Jonathan Storey, Invensys Rail Ltd A vendor exhibition will run throughout the day. The Symposium banquet with an after-dinner talk by Thursday 7 th February: Eight papers, including two keynote addresses: The Hon. Sir Charles Haddon-Cave Assurance Case as a Proof in a Theory towards Formulation of Rebuttals Yoshiki Kinoshita, National Institute of Advanced Industrial Science and Technology (AIST), Japan and Complex System Safety: swans, bugs, toads, dragons and other myths Robin Bloomfield, Adelard LLP and City University London Invited Keynote Speakers Eminent keynote speakers have agreed to contribute to the symposium programme. These keynote speakers are: Nancy Leveson (Massachusetts Institute of Technology, USA) Nancy Leveson is Professor of Aeronautics and Astronautics, and of Engineering Systems, at MIT. She is an elected member of the National Academy of Engineering. Prof. Leveson conducts research on the topics of system safety, software safety, software and system engineering, and human-computer interaction. In 1999 she received the ACM Allen Newell Award for outstanding computer science research and in 1995 the AIAA Information Systems Award for developing the field of software safety and for promoting responsible software and system engineering practices where life and property are at stake. In 2005 she received the ACM Sigsoft Outstanding Research Award. She has published over 200 papers and is author of two books, Safeware: System Safety and Computers published in 1995 by Addison-Wesley and Engineering a Safer World published in 2012 by MIT Press. She consults extensively in many industries on the ways to prevent accidents. Jonathan Storey (Invensys Rail Ltd) Jonathan is a Senior Safety Engineer and Project Assurance Manager, with over 10 years Metro and Mainline railway experience in assessing the safety and reliability of control based systems and equipment. He has been responsible for the engineering safety and reliability of over 37 commissionings; he has produced supporting safety cases and analysis for the introduction of the Victoria Line Signalling Train Control System in overlay and completed the migration of the VLU system into final asset replaced operation. Jonathan is a Chartered Engineer, Member of the IET and Associate Member of the IRSE. Yoshiki Kinoshita (National Institute of Advanced Industrial Science and Technology (AIST), Japan) Dr Yoshiki Kinoshita is a principal research scientist at AIST s Secure Systems Research Institute and an affiliate professor of programming science at NAIST (Nara Advanced Institute of Science and Technology). He was Director of the AIST Verification and Semantics Research Center from 2004 until Before joining AIST in 1989, Dr Kinoshita received his DSc degree from the University of Tokyo. Previously, he spent two years with Texas Instruments. Robin Bloomfield (Adelard LLP and City University London) Professor Bloomfield is a founder member of Adelard and Professor of Software and System Dependability at the City University, London. Prior to forming Adelard he worked in industry for the UK electricity utility (CEGB) where he was concerned with the design and validation of the control and safety systems of nuclear power stations. His research interests are in the dependability (reliability, safety, security) of computer-based systems. His work in safety over the past 20 years has combined policy formulation, technical consulting and underpinning research. Professor Bloomfield holds an MA in Natural Sciences from Cambridge University and is a Chartered Engineer. He has been chairman of EWICS, a member of the IAEA advisory group on software important to nuclear safety, and of the UK Health and Safety Commission study group on software safety. He is currently a member of the CAA Air Traffic System Safety Requirements Consultative Group, of the Information Assurance Advisory Council, and (long term) the Safecomp programme committee. After Dinner Speaker The Hon. Sir Charles Haddon-Cave (Justice of the High Court, Queen s Bench) Sir Charles Haddon-Cave was educated at The King s School, Canterbury, and read law at Pembroke College, Cambridge. He was called to the Bar at Gray s Inn in He practiced at the Commercial Bar in London and Hong Kong from 1980 to He was appointed Queen s Counsel in He is a Bencher of Gray s Inn. At the Bar, he was recognised as one of the leading commercial silks in the fields of aviation, shipping, insurance, travel law and arbitration; he was instructed in major aviation and marine disasters in England such as the Manchester Air Disaster, Herald of Free Enterprise, the Braer Disaster, the Kegworth Aircrash, the Knight Air Crash, the BP Trent and the Marchioness Disaster. He was appointed by the Secretary of State for Defence to conduct the Nimrod Review ( ) into the loss of the RAF Nimrod MR2 aircraft XV230 in Afghanistan in He has lectured widely on safety matters. He was appointed a Justice of the High Court of England and Wales in October 2011 and assigned to the Queen s Bench Division.

Question Time Since we still cannot afford David Dimbleby, our symposium version of Question Time will again be chaired for free by Tom Anderson.

3 Question Time Since we still cannot afford David Dimbleby, our symposium version of Question Time will again be chaired for free by Tom Anderson. All delegates will be invited to submit a written question, if they wish to, on any topic relating to safety-critical systems. The most pertinent, challenging, timely or amusing questions will be selected for discussion by a panel of experts (without any forewarning) and by audience participation. The session will not be broadcast on national television. Vendor Exhibition The exhibition is open to all delegates, will begin on Tuesday evening and run until Wednesday afternoon. It will enable delegates to meet with a number of vendors, who are involved with a range of safety issues across the system development life-cycle. On Wednesday, all coffee breaks and lunch will be served in the exhibition space. Companies who have booked their exhibition space at the conference, in alphabetical order, are: AdaCore, Adelard, Altran, BAE Systems, IET, Isograph, isystem, LDRA, Programming Research, QA Systems, QNX, Quintec, Resource Group, Verocel and Wind River. Note that the whisky tasting reception will be held in the exhibition areas on Tuesday evening. Social Programme Evening Reception Tuesday 5 th February After the first day of the Symposium, all delegates should take full advantage of this opportunity to unwind, socialise with friends and colleagues old and new and enjoy a famous product from designated locations in Scotland. Thus our 21 st Anniversary SSS offers a Reception with a difference, combining an informal opportunity to meet our exhibitors with an educational tasting experience. Each exhibition stand will have a different variety of single malt Scotch whisky available, specially chosen to span the aroma and flavour spectrum; you are invited to visit and sample an appropriate number of these fine beverages. Canapés will be served, and wine plus soft drinks will, of course, also be available. (The reception is included in the three-day conference package for both residential and non-residential delegates.) Symposium Banquet Dinner Wednesday 6 th February The 21 st Anniversary SSS Banquet Dinner will, as usual, be a fine dining experience, held in the symposium hotel, and preceded (at 7.30 pm) by a short welcoming drinks reception. The dress code is entirely a matter of personal choice but it has been noted, over past years, that a number of our delegates have taken the opportunity to dress for dinner in fine style we are pleased to applaud and encourage this practice. So, dinner suits are entirely acceptable, but definitely optional. In accordance with tradition, diners will look forward to a stimulating after-dinner talk; this year the speaker will be The Hon. Sir Charles Haddon-Cave. (The banquet dinner is included in the conference package for residential delegates only. However, non-residential delegates can purchase tickets, preferably when booking.) Programme Day 1: Tuesday 5 th February 2013 Registration and Coffee Introductions and Welcome Certification in the Defence Sector Allan Bain, Ministry of Defence IEC 61508: Assessment, Certification and Other Assurance Measures Ron Bell, Engineering Safety Consultants Ltd Certification in Civil Aviation Dewi Daniels, Verocel Lunch Automotive Regulations Roger Rivett, Jaguar Land Rover Getting Accepted in the UK Rail Industry Peter Sheppard, Bombardier Transportation Tea Certification Panel Session Symposium Reception: With whisky tasting and tools exhibition Additional Dinner tickets Extra tickets for the Symposium Banquet Dinner can be purchased when registering for the conference. These tickets may also be available on-site, at the registration desk. A representative display not definitive

0900 1045 1045 1350 1350 1430 1430 1505 1505 1540 1540 1610 1610 1710 Day 2: Wednesday 6 th February 2013 An exhibition and tools and services fair will run throughout the day Generating Formal

4 Day 2: Wednesday 6 th February 2013 An exhibition and tools and services fair will run throughout the day Generating Formal Model-Based Safety Requirements for Complex, Software- and Human-Intensive Systems John Thomas and Nancy Leveson, Massachusetts Institute of Technology, USA Safety Case for the Airborne Collision Avoidance System Steve Thomas, Entity Systems Ltd and Derek Fowler, JDF Consultancy LLP Coffee and Exhibition Elaborating the Concept of Evidence in Safety Cases Linling Sun and Tim Kelly, University of York Assessing the Overall Sufficiency of Safety Arguments Anaheed Ayoub, Jiang Chang, Oleg Sokolsky and Insup Lee, University of Pennsylvania, USA A Preliminary Study Towards a Quantitative Approach for Compositional Safety Assurance Alejandra Ruiz and Huáscar Espinoza, Tecnalia Research and Innovation, Spain and Fulvio Tagliablò, Sandra Torchiaro, Alberto Melzi, Centro Ricerche FIAT, Italy Lunch and Exhibition Safety Case Approach for the Victoria Line Resignalling Project Jonathan Storey, Invensys Rail Systems Ltd Four Principles of Product Safety Nick Sibley 1, Chris Elliott 2 and Bill Walby 1, 1 BAE SYSTEMS and 2 Pitchill Consulting Ltd MAA s Approach to Risk Management John Allan, Military Aviation Authority, Ministry of Defence Tea and Exhibition Question Time: Question Time: a chance for delegates to ask questions of an expert panel, on anything to do with safety-critical systems * Chaired by Tom Anderson, Newcastle University Day 3: Thursday 7 th February 2013 Assurance Case as a Proof in a Theory towards Formulation of Rebuttals Yoshiki Kinoshita and Makoto Takeyama, National Institute of Advanced Industrial Science and Technology (AIST), Japan A Formal, Systematic Approach to STPA using Event-B Refinement and Proof John Colley and Michael Butler, University of Southampton Testing and Proving: Strange Bedfellows? Robert Dewar, New York University and AdaCore, USA Coffee Balancing Safety, Security, Functionality and Performance Chris Hobbs and Akramul Azim, QNX Software Systems, Canada Challenging the Safety Sausage Machine Paul Chinneck and Gavin Wilsher, Altran Lunch Complex System Safety: swans, bugs, toads, dragons and other myths Robin Bloomfield, Adelard LLP and City University London The Role of Human Factors in System Safety Analyses Gabriele Schedl and Lukas Fritz, Frequentis AG, Austria Modelling Safety Culture for Individual Organisations Keith Jones, Atkins Defence Closing Remarks 1530 Tea and Close of the Symposium 1930 for 2000 BANQUET With after-dinner talk by The Hon. Sir Charles Haddon-Cave The Four States of Man: Risk Ignorant, Cavalier, Averse and Sensible Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius and a lot of courage to move in the opposite direction. (E.F. Schumacher) * To submit a question in advance, please chris.dale@scsc.org.uk

REGISTRATION FEES The non-residential symposium fee covers lunch on Tuesday, Wednesday and Thursday, the reception on Tuesday evening, and a copy of the proceedings.

5 REGISTRATION FEES The non-residential symposium fee covers lunch on Tuesday, Wednesday and Thursday, the reception on Tuesday evening, and a copy of the proceedings. A residential option is available which includes accommodation on Tuesday (with evening reception, dinner and breakfast) and Wednesday night (with conference banquet and breakfast), lunches and a copy of the proceedings. MAP OF BRISTOL The rates listed below apply to Club members who have paid a current subscription. Non-members, members who have not paid a current subscription, and anyone wishing to renew for 2013 should pay a supplement of 95 which covers Club membership until 31 December Bookings for partial attendance (1 or 2 day) can be accepted. Please contact the Symposium organizer (see bottom of this sheet) for details. Non-Residential Residential Symposium (3 days) Extra night s accommodation Membership supplement 95 Banquet tickets for non-residential delegates 55 each VENUE The symposium will take place at: Bristol Marriott Royal Hotel College Green Tel: + 44 (0) Bristol, BS1 5TA Fax: + 44 (0) The hotel is situated in the centre of Bristol, next to the Cathedral. It has extensive leisure facilities including a gymnasium, sauna, steam room and large swimming pool. The hotel has on-site parking and spaces are allocated on a first come, first served basis. There are daily direct international flights to Bristol airport from Amsterdam, Brussels, Frankfurt and Paris, as well as from several UK airports. Symposium Venue The rail journey from London (Paddington) to Bristol (Temple Meads) takes approximately 1 hour and 45 minutes, and then 10 minutes by taxi to the hotel. SYMPOSIUM BANQUET Dinner on the Wednesday (6 th February) will be a symposium banquet in the main suite of the Hotel. The cost of one banquet place is included in the residential packages; additional banquet places can be purchased by all delegates at a cost of 55. CANCELLATION POLICY Registration fees paid in advance are refundable (less a 50 cancellation fee) if written notice is received by January 4 th Refunds cannot be made after this date. All refunds will be issued after the symposium. Delegates are able to replace their attendance with a colleague, but only by notification to the event organiser. It is extremely unlikely that the symposium would be cancelled due to adverse weather conditions. We are bound by hotel policies and are still billed for catering and room charges etc. Therefore, we regret that we cannot reimburse delegates in the event of bad weather. REGISTRATION All enquiries, should be directed to: Joan Atkinson, Centre for Software Reliability, Claremont Tower, Newcastle University, NE1 7RU, UK Fax: Tel: Joan.Atkinson@ncl.ac.uk

THINGS TO VISIT IN BRISTOL Clifton Suspension Bridge The world famous Clifton Suspension Bridge was designed by the great Victorian engineer Isambard Kingdom Brunel, although he never lived to see

The Bridge s spectacular setting on the cliffs of the Avon Gorge has made it the defining symbol of Bristol, drawing thousands of visitors a year just to stroll across for views of the ancient Gorge,

6 THINGS TO VISIT IN BRISTOL Clifton Suspension Bridge The world famous Clifton Suspension Bridge was designed by the great Victorian engineer Isambard Kingdom Brunel, although he never lived to see his creation finished in The Bridge s spectacular setting on the cliffs of the Avon Gorge has made it the defining symbol of Bristol, drawing thousands of visitors a year just to stroll across for views of the ancient Gorge, elegant Clifton and the city beyond. Event Sponsors The Safety-Critical Systems Club wishes to thank everyone who helped to support this event, including: Brunel's ss Great Britain Step back in time on board the world's first great ocean liner, Brunel's ss Great Britain, in Bristol's historic Harbourside. This iconic steam ship, and national treasure, was designed by I K Brunel, and lies at the heart of a multi award-winning visitor attraction. Brunel Mile and City Docks Brunel Mile and City Docks MP3 Tour follows part of the Brunel Mile to Brunel's ss Great Britain. The tour should take around two hours to complete, but you may wish to pause the tour in order to explore certain sites along the way in more detail, or take a detour to the Brunel lock and underfall yard. The tour starts at Bristol Temple Meads railway station and ends at the Cumberland basin. Cabot Tower Cabot Tower, the century-old 32m high tower that sits at the top of Brandon Hill offering panoramic views of the city, reopened to the public on 16 August 2011, after being closed for four years. Cabot Tower, set in gorgeous parkland near Park Street in the West End, is a 105ft tower built in 1897 to commemorate John Cabot's famous voyage from Bristol to the continent of North America four hundred years earlier. The tower is built from red sandstone covered with cream Bath stone, was designed by the Bristol architect William Venn Gough, and paid for by public subscription. Exhibitors will include The Matthew The Matthew is a fabulous and faithful reconstruction of the boat used by John Cabot when he discovered Newfoundland in 1497, becoming the first European known to have set foot on the American mainland. Bristol Cathedral Bristol s beautiful and historic Cathedral is located next to the symposium hotel. A church has almost certainly stood on the site for over a thousand years, but it came to prominence in 1140 when Robert Fitzhardinge founded the Abbey of St Augustine. The Chapter House and Abbey Gatehouse remain clear to see, and other remains are to be found within Bristol Cathedral School. Banksy Graffiti Art Bristol's home-grown and anonymous graffiti artist Banksy is known all across the world for his satirical, antiestablishment and thought-provoking street art. Several pieces remain in various locations around Bristol, so you can see his amazing work firsthand. Supported By Endorsed By Frogmore Street Banksy s Frogmore Street artwork is actually on the side of a sexual health clinic, with the best views being had from the small bridge on Park Street that crosses Frogmore Street. Mild Mild West Banksy s Mild Mild West artwork is located in Stokes Croft, next to The Canteen Bristol. The best best views are from the Jamaica Street Junction. Thekla Another example of Banksy's work can be viewed on the side of the Thekla Social boat moored in the Mud Dock area of Bristol's Floating Harbour. Organised By Tel: +44 (0) Fax: +44 (0) publishes the proceedings of the symposium Clifton Suspension Bridge

The Safety-Critical Systems Club SSS 09 PROGRAMME Safety-critical Systems Symposium 2009

The Safety-Critical Systems Club SSS 09 PROGRAMME Safety-critical Systems Symposium 2009 Hilton Brighton Metropole 3rd - 5th February 2009 The Safety-Critical Systems Club gratefully acknowledges the support