The epistemology of fault tree analysis: An ethical critique

International Journal of Risk Assessment and Management

Volumn 7, Issue 3, 2007, Pages 382-430

  Manion, Mark ^a  

^a DREXEL UNIVERSITY   (United States)

Author keywords

Ethical analysis; Ethical responsibility; Fault tree analysis; Probabilistic risk assessment; Professional ethics; Professionalism

Indexed keywords

EID: 33847084307     PISSN: 14668297     EISSN: 17415241     Source Type: Journal    
DOI: 10.1504/IJRAM.2007.011990     Document Type: Review

References (155)

1. Abrahamson, D. and Swahn, J. (2000) 'The political atom', The Bulletin of the Atomic Scientists, Vol. 56, No. 4, pp.39-44.
2. Abramson, L.R. (1988) 'The philosophical basis for the use of probabilities in safety assessments', Reliability Engineering and System Safety, Vol. 23.
3. Alpert, M. and Raiffa, H. (1982) 'A progress report on the training of probability assessors', in D. Kahneman, P.Slovic and A. Tversky (Eds) Judgment Under Uncertainty: Heuristics and Biases, Cambridge University Press, pp.294-305.
4. Anderson, E. (1993) Value in Ethics and Economics, Cambridge: Harvard University Press.
5. Andradottir, S. and Bier, V.M. (1998) 'An analysis of decomposition for subjective estimation in decision analysis, IEEE Transactions on Systems, Man and Cybernetics - Part A: Systems and Humans, Vol. 28, pp.443-453.
6. Andrews, J.D. and Morgan, J.M. (1986) 'Application of the diagraph method of fault tree construction to a process plant', Reliability Engineering and System Safety, Vol. 14, No. 2, pp.85-106.
7. Apostolakis, G.E. (1988) 'The interpretation of probability in probabilistic safety assessments', Reliability Engineering and System Safety, Vol. 23.
8. Apostolakis, G.E. (1994) 'How useful is quantitative risk assessment?' Risk Analysis, Vol. 24, No. 3, pp.515-520.
9. Armstrong, J.S., Denniston, W.B. and Gordon, M. (1975) 'The use of a decomposition principle in making judgments', Organizational Behavior and Human Performance, Vol. 14, pp.257-263.
10. Aven, T. and Porn, K. (1998) 'Expressing and interpreting the results of quantitative risk analyses', Reliability Engineering and System Safety, Vol. 61, No. 1.
11. Barbour, I.(1980) Technology, Environment, And Human Values, New York, NY: Praeger.
12. Barlow, R. E. and Purnendu, C. (1973) Introduction to Fault Tree Analysis, Operations Research Center, Berkeley, CA. Contract(s)/Grant(s): N00014-69-A-0200-1036; F33615-73-C-4078 Report No.(s): AD-774072; ORC-73-30; Avail: CASI; A03, Hardcopy; A01.
13. Baron, D.S. (1992) 'The abuses of risk assessment', in M. Waterstone (Ed.) Risk and society: the interaction of science, technology and public policy, Dordrecht, The Netherlands: Kluwer Academic Publishers, pp.173-177.
14. Bayless, M. (1978) 'The price of life', Ethics, Vol. 89, No. 1, pp.28-39.
15. Bentham, J. (1788) Principles of Morals and Legislation, New York: Prometheus Books.
16. Bier, V. (2001) 'On the state of the art: risk communication to decision-makers', Reliability Engineering and System Safety, Vol. 71, pp. 151-57.
17. Bohnenblust, H and Slovic, P (1998) 'Integrating technical analysis and public values in risk-based decision making', Reliability Engineering and System Safety, Vol. 59, pp. 151-159.
18. Bryant, R.E. (1986) 'Graph-based algorithms for Boolean function manipulation', IEEE Transactions on Computers, Vol. 35, No. 8, pp.677-691.
19. Buchner, H. (1994) 'Occurrence of common mode failure', Reliability Engineering and System Safety, Vol. 45, Nos. 1-2, pp.201-214,
20. Burns, M. and Pearl, J. (1981) 'Causal and diagnostic inferences: a comparison of validity', Organizational Behavior and Human Performance, Vol. 28, pp.379-394.
21. Byrd, D.M and Cothern, R.C. (2000) Introduction to Risk Analysis: A Systematic Approach to Science-Based Decision Making, Washington DC, Government Institutes Publications.
22. Byrne, L.J. (1988) 'The value of life: the state of the art', in L. Martin (Ed) Risk assessment and management: emergency planning perspectives, Waterloo, Canada: University of Waterloo Press, pp.79-101.
23. Carlisle, R.P. (1997) 'Probabilistic risk assessment in nuclear reactors:engineering success, public relations failure', Technology and Culture, Vol. 38, pp.920-941.
24. Chamis, C.C. (1991) 'Reliability and risk assessment of structures', NASA Lewis Research Center, USA; National Aeronautics and Space Administration, Technology 2000, Vol. 1; Mar 1, pp.241-248.
25. Chen, J.C. (1985) 'Probabilistic methodology for estimating radiation induced cancer risk', Report No.(s): TI85-016786; UCID-20468; NUREG/CR-4331, avail: CASI; A09.
26. Clemen, R.T. and Lichtendahl, Jr., K.C. (2002) 'Debiasing expert overconfidence: a bayesian calibration model', Proceedings of 6th Conference on Probabilistic Safety Assessment and Management (PSAM6), San Juan, Puerto Rico.
27. Clemen, R.T. and Winkler, R.L. (1999) 'combining probability distributions from experts in risk analysis', Risk Analysis, Vol. 19, No. 2, pp.46-55.
28. Cooke, R.M. (1991) Experts in Uncertainty: Opinion and Subjective Probability in Science, New York: Oxford University Press, pp.30-40.
29. Cooper, S.F., Ramey-Smith, A.M., Wreathall, J., Parry, G.W., Bley, D.C., Lucas, W.J., Taylor, J.H. and Barrier, M.T. (1996) 'A technique for human error analysis (ATHEANA) (NUREG/CR-6350)', Washington, DC: US Nuclear Regulatory Commission.
30. Dang, W. and Chen, J. (2003)'A probabilistic risk assessment for children who contact CCA treated playsets and decks', Draft preliminary report, November 10, Consumer Product Safety Commission, Washington, DC.
31. Darlington, A., Grout, S. and Whitworth, J. (2001) 'How safe is safe enough?: an introduction to risk management', available from: http://www.sias.org.uk/papers/risk2001.pdf.
32. Deisler, P.F. (2002) 'A perspective: risk analysis as a tool for reducing the risks of terrorism', Risk Analysis, Vol. 22, No. 3, pp.405-411.
33. Dougherty, E. (1998) 'Human errors of commission revisited: an evaluation of the ATHEANA approach', Reliability Engineering & System Safety, Vol. 60, pp. 71-82.
34. Doyle, S.A. (1995) 'dependability assessment using binary decision diagrams (BDDs)', Proceedings of the Twenty-Fifth International Symposium on Fault Tolerant Computing, pp.249-258.
35. Dunning, Jr, D.E. and Leggett, R.W. (1981) 'An approach to modeling of human performance for purposes of probabilistic risk assessment', Oak Ridge National Lab., Contract(s)/Grant(s): W-7405-ENG-26 Report No.(s): DE82-001474; CONF-810905-22.
36. Edwards, G.T. and Watson, I.A. (1979) 'A study of common mode failures', UK Atomic Energy Authority Report SRD-R146.
37. Englehardt, J.D. (1998) 'Ecological and economic risk analyses of Everglades: Phase I restoration alternatives', Risk Analysis, Vol. 18, No. 6, pp.755-771.
38. Environmental Protection Agency (2000) 'Superfund probabilistic risk assessment to characterize uncertainty and variability', Federal Register, Vol. 65, No. 31, pp.7550-7552.
39. Evan, W.M. and Manion, M. (2002) Minding the Machines: Preventing Technological Disasters, Upper Saddle River, NJ: Prentice Hall.
40. Ferre, F. (1995) Philosophy of Technology. Athens, GA: University of Georgia Press.
41. Feynman, R.P. (1988) 'An outsider's inside view of the Challenger inquiry', Physics Today, Vol. 41, pp.26-37.
42. Fiorino, D. ( 1995) Making Environmental Policy, Berkeley: University of California Press.
43. Fischoff, B. (1989) 'Risk: a guide to controversy', in Improving Risk Communication, National Research Council, Washington, DC: National Academies Press.
44. Fischoff, B. (1998) 'Communicate unto others ...' Reliability Engineering and System Safety, Vol. 59, pp.63-72.
45. Fischhoff, B., Slovic, P., Lichtenstein, S., Read, S. and Combs, B. (1978) (Eds) How Safe is Safe Enough? A Psychometric Study of Attitudes Towards Technological Risks and Benefits, Amsterdam: Elsevier Scientific Publishing Company.
46. Fujita, Y. and Hollnabgel, E. (2004) 'Failure without errors: quantification in the context in HRA', Reliability Engineering and System Safety, Vol. 83, pp.145-151.
47. Fussel, J.B. (1973) 'A formal methodology for fault tree construction', Nuclear Science and Engineering, Vol. 42, pp.421-432.
48. Garrick, B.J. (1988) 'Approach to risk analysis in three industries: nuclear power, space systems, and chemical process', Reliability Engineering and Systems Safety, Vol. 23, No. 3, pp. 195-205.
49. Grabowski, M. and Roberts, K. (1996) 'Human and organizational error in large scale systems', IEEE Transactions on Systems, Man, and Cybernetics, Vol. 26, pp.2-16.
50. Grant, A.S. and Mayes, J.T. (1991) 'Cognitive task analysis', in G.R.S. Weir and J.L. Alty (Eds) Human-Computer Interaction and Complex Systems, London, Academic Press Ltd.
51. Green, R.G. (1985) 'Stress and accidents', Aviation Space and Environmental Medicine , Vol. 56, No. 7, pp.638-641
52. Grosse, L., DeJong, J. and Murphy, J. (1999) 'Risk analysis of residential fire detector performance', Journal of Applied Fire Science, Vol. 6, No. 2 pp. 109-126.
53. Hammond, K.R. (1986) 'Improving scientists' Judgments of Risk', in H.R. Arkes and K.R. Hammond, (Eds) Judgment and Decision Making: An Interdisciplinary Reader, Cambridge, London, Cambridge University Press
54. Hare, R.M. (1981) Moral Thinking: Its Levels, Method, and Point, London: Oxford University Press.
55. Hausman, D. and McPhearson, M. (1996) Economic Analysis and Moral Philosophy, London: Cambridge University Press.
56. Heger, A.S. and Bhat, J.K. (1995) 'Calculating exact top-event probabilities using Sigma Pi', IEEE Transactions on Reliability, Vol. 44, No. 4, pp.640-644.
57. Henrion, M., Fischer, G.W. and Mullin, T. (1993) 'Divide and conquer: effects of decomposition on the accuracy and calibration of subjective probability distributions', Organizational Behavior and Human Decision Processes, Vol. 55, pp.207-227.
58. Henry, J.J. and Andrews, J.D. (1997) 'Computerized fault tree construction of a train breaking system', Quality and Reliability Engineering International, Vol. 13, pp.299-309.
59. Hollnagel, E. (1993) Human Reliability Analysis: Context and Control, London: Academic Press.
60. Hollnagel, E. (2000) 'Looking for errors of omisssion and commission in The Hunting of the Snark Revisited', Reliability Engineering and System Safety, Vol. 68, pp.135-145.
61. Hora, S. (1992) 'Acquisition of expert judgment: examples from risk assessment', Journal of Energy Engineering, Vol. 118, No. 2.
62. Jasanoff, S. (1989) 'Norms for evaluating regulatory science', Risk Analysis, Vol. 271.
63. Jenkinson, D. (2004) 'The elicitation of probabilities: a review of the statistical literature', available from: http://shef.ac.uk/beep/review2.pdf.
64. Johnson, D. (1989) 'The social/professional responsibility of engineers', Annals of the New York Academy of Sciences, Vol. 577, pp.106-114.
65. Johnson, D. (1992) 'Do engineers have social responsibilities', Journal of Applied Philosophy, Vol. 9, No. 1, pp.21-34.
66. Johnson, P., Diaper, D. and Long, J.B. (1994) 'Tasks, skills, and knowledge: task analysis for knowledge based descriptions', in: B. Shackel (Ed.) Human-Computer Interaction - INTERACT 1994. Amsterdam: North Holland.
67. Joshua, S.C. and Garber, N.J. (1992) 'A causal analysis of large vehicle accidents through fault tree analysis', Risk Analysis, Vol. 12, No. 2, pp.173-187
68. Kahn, S. (1986) 'Economic estimates of the value of life', IEEE Technology and Society Magazine, June, 24-29.
69. Kahnemann, D. and Tversky, A. (2000) Choices, Values and Frames, Cambridge: Cambridge University Press.
70. Kant, I. (1785) Groundwork for the Metaphysics of Morals, trans. J.W. Ellington (1981) Indianapolis, IN: Hackett Publishing Company.
71. Keeney, R.L. and von Winterfeld, D. (1991) 'Eliciting probabilities from experts in complex technical problems', IEEE Transactions on Engineering Management, Vol. 38, No. 3, pp.191-201.
72. Kelman, S. (1981) 'Cost benefit analysis: an ethical critique', reprinted in T. Donaldson, and P. Werhane (Eds) Ethical Issues In Business, 5th edition, Saddle River, NJ: Prentice Hall.
73. Kim, I.S. (2001) 'Human reliability analysis in the man-machine interface: design review', Annals of Nuclear Energy, Vol. 28, pp.1069-1081.
74. Kirwan, B. (1996) 'The validation of 3 human reliability quantification techniques - THERP, HEART, and JEDI', Applied Ergonomics, Vol. 29, pp.299-318.
75. Krebs, W.K. (2001) Human Factors General Aviation: Program Review', Federal Aviation Administration, Washington, DC: Federal Register.
76. Kuhn, T. (1962) The Structure of Scientific Revolutions, Chicago: University of Chicago Press.
77. Kumamoto, H. and Henley, E.J. (2000) Probabilistic Risk Assessment and Management for Engineers and Scientists, 2nd Edition, New York: Wiley-IEEE Press.
78. Kunreuther, H., Novemsky, N. and Kahneman, D. (2001) 'Making low probabilities useful', Journal of Risk and Uncertainty, Vol. 23, pp. 103-120.
79. Lambert, H. and Fussel, J.B. (1976) 'Quantitative evaluation of nuclear system reliability and safety characteristics', IEEE Transactions on Reliability, Vol. 25, No. 3, pp.178-183.
80. Lanthrop, J. (1982) 'Evaluating technological risk: prescriptive and descriptive perspectives', in H. Kunreuther and E. Levy (Eds) The Risk Analysis Controversy: An Institutional Perspective, Heidelberg: Springer-Verlag, pp. 165-180.
81. Lave, L. (1987) (Ed) Risk Assessment and Management, New York: Plenum Press.
82. Lave, L.B. and Balvanyos, T. (1998) 'Risk analysis and management of dam safety', Risk Analysis, Vol. 18, pp.455-462.
83. Le Bot, P. (2004) 'Human reliability data, human error and accident models: illustration through the Three Mile Island accident analysis', Reliability Engineering & System Safety, Vol. 83, pp.153-167.
84. Littlewood, B. (1996) 'The impact of diversity upon common-mode failures', Reliability Engineering & System Safety, Vol. 51, No. 1, pp.101-113.
85. Lowrance, W. L. (1976) Of Acceptable Risk.
86. Ludke, R.L. Strauss, F.F. and Gustafson, D.H. (1992) 'Comparing five methods for estimating subjective probability distributions', Organizational Behavior and Human Performance, Vol. 19, pp. 162-179
87. MacGregor, D., Lichtenstein, S. and Slovic, P. (1998) 'Structuring knowledge retrieval: an analysis of decomposed quantitative judgments', Organizational Behavior and Human Decision Processes, Vol. 42, pp.303-323.
88. MacKinnon, B. (1986) 'Pricing human life', Science, Technology, and Human Values, Vol. 11, No. 2, pp.29-39.
89. Malik, A.R., Wang, R.K., Brayton, T and Sangiovanni-Vincentelli, A. (1988) 'Logic verification using binary decision diagrams in a logic synthesis environment', Proc. IEEE Int. Conf. Computer-Aided Design, Washington, DC: IEEE Publications, pp.6-9.
90. Manion, M. (2002) 'Ethics, engineering, and sustainable development', IEEE Technology and Society Magazine, Vol. 21, pp.39-48.
91. Manion, M. (2004) 'The causes and prevention of industrial accidents, disasters, and catastrophes: a sociotechnical systems approach', unpublished manuscript.
92. Martin, M. (1982) 'Comments on Levy and Copp and Thompson', in V.Weil (Ed) Beyond Whistleblowing: Defining Engineers ' Responsibilities, Chicago, IL: Center for the Study of Ethics in the Profession, Illinois Institute of Technology, pp. 146-152.
93. Mauri, G. (2000) 'Integrating safety analysis techniques, supporting identification of common cause failures', doctoral dissertation, University of York Department of Computer Science, available from: http://www.cs.york.ac.uk/ ftpdir/reports/YCST-2001-02.pdf.
94. McFarland, M. (1991) 'The public health, safety and welfare: an analysis of the social responsibilities of engineers, ', in D. Johnson (Ed) Ethical Issues in Engineering, Prentice Hall: Englewood Cliffs, NJ, pp. 159-173.
95. Mensing, R.W. (1985) 'Probabilistic methodology for estimating radiation induced cancer risk', Lawrence Livermore National Lab, Contract(s)/Grant(s): W-7405 ENG-48 Report No.(s): DE86-001781; UCID-20553; Avail: CASI; A04.
96. Mill, J.S. (1861) Utilitarianism, New York, NY, Hackett Publishing Company (2001)
97. Misra, K.B. and Weber, G.G. (1989) 'A new method for fuzzy fault tree analysis', Microelectron Reliability, Vol.29, No. 2, pp. 195-216.
98. Misra, K.B. and Weber, G.G. (1990) 'Use of fuzzy set theory for level I studies in probabilistic risk assessment', Fuzzy Sets and Systems, Vol. 37, pp. 130-160.
99. Modarres, M. and Dezfuli, H. (1984) 'A truncation methodology for evaluating large fault trees', IEEE Transactions on Reliability, Vol. 33, No. 4, pp.325-328.
100. Moore, J.L. (1995) 'Cost benefit analysis: issues in its use in regulation', Congressional Research Service Report CRS Report to Congress. Washington, DC: The Library of Congress.
101. Moses, F. (1998) 'Probabilistic-based structural specifications', Risk Analysis, Vol. 18, pp.445-454.
102. Mosleh, A. (1991) 'Common cause failures: an analysis, methodology and examples', Reliability Engineering & System Safety, Vol. 34, pp.249-292.
103. Mosleh, A. et al (1998) 'Procedures for treating common cause failures in safety and redundancy studies', NUREG/CR 4780, Vols. 1 & 2, Washington DC: Office of Nuclear Regulatory Research, pp.4-8
104. National Research Council (1996) Understanding Risk: Informing Decisions in a Democratic Society, Washington, DC: National Academies Press.
105. Neapolitan, R.E. (1990) Probabilistic Reasoning in Expert Systems: Theory and Algorithms, NY: John Wiley & Sons.
106. Nehnevajsa, J. (1984) 'Low probability/high consequence risks: issues in credibility and acceptance', in R. Waller and V. Covello, (Eds) Low Probability/High-Consequence Risk Analysis, New York: Plenum Press.
107. Nilsen, T. and Aven, T. (2003) 'Models and model uncertainty in the context of risk analysis', Reliability Engineering and System Safety, Vol. 79, pp.309-317.
108. Pagani, C., Smith and Apostolakis, G. (2004)'Making decisions for incident management in nuclear power plants using probabilistic safety assessment', Risk Decision and Policy, Vol. 9, pp.271-295.
109. Parry, G. (1996) 'The characterization of uncertainty in probabilistic risk assessments of complex systems', Reliability Engineering and System Safety, Vol. 54, pp.119-26.
110. Pate-Cornell, M.E. (1984) 'Aggregation of opinions and preferences in decision problems, low probability-high consequence risk analysis: issues, methods and case studies', in R.A. Waller and V.T. Covello (Eds) Proceedings of the 1982 Annual Meeting of the Society for Risk Analysis, New York: Plenum Press, pp.493-503.
111. Pate-Cornell, M.E. (1993a) 'Risk analysis and risk management for offshore platforms: lessons from the Piper Alpha accident', Science, Vol. 115, pp.179-190.
112. Pate-Cornell, M.E. (1993b) 'Conditional uncertainty analysis and implications for decision making: the case of the waste isolation pilot plant', Risk Analysis, Vol. 19, No. 5, pp.995-102.
113. Pate-Cornell, M.E. (1996) 'Uncertainties in risk analysis: six levels of treatment', Reliability Engineering and System Safety, Vol. 54, pp.95-111.
114. Pate-Cornell, M.E., Murphy, D.M., Lakats, M. and Gaba, D.M (1996) 'Patient risk in anesthesia probabilistic risk analysis, management effects and improvements', Annals of Operations Research, Vol. 67, pp.211-233.
115. Pate-Cornell, M.E. and Dillon, R. (2001) 'Probabilistic risk analysis for the NASA space shuttle: a brief history and current work', Reliability Engineering and System Safety, Vol. 76, No. 4, pp.201-222.
116. Peplow, D., Sulfredge, C.D., Sanders, R.L. and Morris, R.H. (2004) 'Calculating nuclear power plant vulnerability using integrated geometry and event/fault tree models', Nuclear Science and Engineering, Vol. 146, No. 1, pp.71-87.
117. Perrow, C. (1984) Normal Accidents, New York: Basic Books, Chapter 6, pp. 170-232.
118. Peters, R., Covello, V. and McCallum, D. (1997) 'The determinants of trust and credibility in environmental risk communication: an empirical study', Risk Analysis, Vol. 17, No. 1.
119. Priddy, T.G. (1993) 'Steps required in the pursuit of quantitative risk management processes for high pressure systems', Sandia National Labs., USA, July 1, pp.1-12.
120. Quine, W.V.O. (1960) Word and Object, Cambridge, MA: MIT Press.
121. Quine, W.V.O. (1969) Ontological Relativity and Other Essays, New York: Columbia University Press.
122. Rausaund, M. (2004) System Reliability Theory, New York: John Wiley & Sons.
123. Rescher, N. (1987) 'Risk and the social value of a life', in J. Humber, and R. Almeder (Eds) Quantitative Risk Assessment: Biomedical Ethics Reviews, Clifton, NJ: Humana Press, pp.225-237.
124. Roberts, N.H, Vesely, W.E., Haasl, D.F. and Goldberg, F.F. (1981) Fault Tree Handbook, NUREG-0492, Nuclear Regulatory Commission.
125. Roberts, T., Narrod, C., Malcolm, S. and Modarres, M. (2003) 'An interdisciplinary approach to developing a probabilistic risk analysis model: applications to a beef slaughterhouse', in N. Hooker and E. Murano (Ed) Interdisciplinary Food Safety Research, CRC Press.
126. Ruckelshaus, W. (1983a) 'Risk, science, and democracy', Issues in Sei. & Tech., Vol. 1, No. 3, pp. 19-30
127. Ruckelshaus, W.D. (1983b) 'Science, Risk and Public Policy', Science, Vol. 221, pp.1027-1028.
128. Sandia National Laboratories (2001) 'Fault tree analysis of component assessment nuclear surety safety training program', DoD 5000.3-M5, Procedures Manual Improving Test and Evaluation Effectiveness in Support of the Major Weapon Systems Decision Process, Washington, DC.
129. Schwing, R.C. and Albers, W.A. (Eds) (1980) Societal Risk Assessment: How Safe is Safe Enough?, New York: Plenum Press.
130. Sharma, U. (1993) 'Use of recursive methods in fuzzy fault tree analysis: an aid to quantitative risk analysis', Reliability Engineering and System Safety, Vol. 41, pp.231-237.
131. Shieh, L. C. (1985) 'Simplified seismic probabilistic risk assessment: procedures and limitations', Lawrence Livermore National Lab, USA,Contract(s)/Grant(s): W 7405 ENG-48 Report No.(s): DE86-001781; UCID-20553; Avail: CASI; A04.
132. Shrader-Frechette, K. (1991) Risk and Rationality, Berkeley: University of California Press.
133. Sidgwick, H. (1874) Methods of Ethics, Book IV, Chapter I.
134. Singer, D. (1990) 'A fuzzy set approach to fault tree and reliability analysis', Fuzzy Sets and Systems, Vol. 34, pp.145-155.
135. Slovic, P. (1999) 'Trust, emotion, sex, politics and science: surveying the risk-assessment battlefield', Risk Analysis, Vol. 19, No. 4.
136. Slovic, P. and Fischhoff, B. (1982) 'How safe is safe enough? Determinants of perceived and acceptable risk', in L. Gould and C. Walker, (Eds) Too Hot To Handle, New Haven CT: Yale University Press.
137. Smith, C.L. and Fowler, R.D. (2003) 'SAPHIRE "Recover Cut Sets" Editor: a technique for automating the manipulation and edition of PRA cut sets', Idaho National Engineering Laboratory, Lockheed Martin Idaho Technologies, DOE Idaho Field Office Contract DE-AC07-94ID13223.
138. Steiger, J.H. and Gettys, C.F. (1993) 'Conditional dependence and decomposition strategies in diagnostic inference systems', Organizational Behavior and Human Performance, Vol. 10, pp.88-107.
139. Sterm, P.C. and Fineberg, H.V. (Eds) (1996) Understanding Risk: Informing Decisions in a Democratic Society, Washington, DC: National Academy Press.
140. Stratler, O., Dang, V., Kaufer, B. and Daniels, A. (2004) 'On the way to assess errors of commission', Reliability Engineering and System Safety, Vol. 83, pp.129-138.
141. Swain, A.D. and Guttman, H.E. (1983) Handbook of Human Reliability Analysis with Emphasis on Nuclear Power Plant Applications, (NUREG/CR-1278), Washington, DC. Nuclear Regulatory Commission.
142. Tanaka, H., Fan, L.T., Lai, F.S. and Toguchi, K. (1983) 'Fault tree analysis by fuzzy probability', IEEE Trans. Reliability. Vol. 32, No. 5, pp.453-457.
143. Taylor, A. (1981) 'Comparison of predicted and actual reliabilities at a chemical plant', Chem. E. Symposium Series, Vol. 66, No. 105.
144. Toft, B. (1996) 'Limits to the mathematical modeling of disasters', in Hood, C and Jones, D (Eds) Accident and Design: Contemporary Debates in Risk Management, London: UCL Press, pp.99-110.
145. Tversky, A. and Kahneman, D. (1973) 'Availability: a heuristic for judging frequency and probability', Cognitive Psychology, pp.207-232.
146. Tversky, A. and Kahneman, D. (1974) 'Judgment and uncertainty: heuristics and biases', Science, pp.1124-1131,
147. US Nuclear Regulatory Commission (1975) Reactor safety study - an assessment of accident risks in US commercial nuclear power plants, Report WASH-1400, NUREG-75/014.
148. Vick, S.G. (1999) 'Considerations for estimating structural response probabilities in dam safety analysis', U.S. Bureau of Reclamation Technical Service Center, Denver CO. Final Technical Report, Order no. 99DG81029, Reference no. 99D88313040.
149. Waller, R.A. and Covello, V.T. (1984) Low-Probability High-Consequence Risk Analysis, New York: Plenum Press.
150. Weinberg, A.M. (1972) 'Science and trans-science', Minerva, Vol. 10, pp.209-222.
151. Whipple, C. (Ed) (1987) De Minimus Risk, New York: Plenum Publishing Company.
152. Wilson, R. (2003) 'Combating terrorism: an event tree approach', available from: http://www.whitehouse.gov/omb/inforeg/2003report/356.pdf.
153. Winkler R.L. (1996) 'Uncertainty in probabilistic risk assessment', Reliability Engineering and System Safety, Vol. 54, pp.127-132.
154. Wood, A.P. (1985) 'Multistate block diagrams and fault trees', IEEE Transactions on Reliability, Vol. 34, pp.236-240.
155. Zio, E. and Apostolakis, G.E. (1996) 'Two methods for the structured assessment of model uncertainty by experts in performance assessments of radioactive waste repositories', Reliability Engineering and System Safety, Vol. 54, pp.225-241.