SESAR safety decision-making: Lessons from environmental, nuclear and defense modeling

Safety Science

Volumn 48, Issue 7, 2010, Pages 831-844

  Brooker, Peter ^a  

^a Aviation Consultant ^*  (United Kingdom)

Author keywords

Air Traffic Management; Formal safety assessment; Modeling; Risk analysis

Indexed keywords

AIR TRAFFIC MANAGEMENT; AIR TRAFFICS; ATM SYSTEMS; CONCEPTUAL CHANGE; DECISION MAKERS; EUROPEAN AIR TRAFFIC MANAGEMENTS; FORMAL SAFETY ASSESSMENT; HIGH COSTS; HIGH FIDELITY; HUMAN-IN-THE-LOOP SIMULATIONS; INFORMATION PROCESSING; MODELING RISK; NEW TECHNOLOGIES; PENETRATION TESTING; SAFETY ISSUES; SAFETY PREDICTION; SAFETY PROBLEMS; SINGLE EUROPEAN SKY; VALIDATION PROCESS;

AIR TRANSPORTATION; ASYNCHRONOUS TRANSFER MODE; AUTOMATIC TELLER MACHINES; DATA PROCESSING; DECISION MAKING; INTERNET PROTOCOLS; RISK ANALYSIS; RISK ASSESSMENT; SAFETY FACTOR; SAFETY TESTING;

AIR TRAFFIC CONTROL;

ACCURACY; AVIATION; BIOSAFETY; COMPUTER PROGRAM; COST EFFECTIVENESS ANALYSIS; DECISION MAKING; ENVIRONMENTAL FACTOR; EUROPE; NUCLEAR SAFETY; PREDICTION; PRIORITY JOURNAL; PROCESS MODEL; REVIEW; RISK ASSESSMENT; TRAFFIC SAFETY; VALIDATION PROCESS;

EID: 77952546635     PISSN: 09257535     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ssci.2010.03.015     Document Type: Review

References (60)

1. Abrams, D.M., 2003. FAA System Security Testing and Evaluation. Mitre Center for Advanced Aviation System Development, McLean, Virginia.
2. Amey, P., 2004. Dear Sir, yours faithfully: an everyday story of formality invited keynote address, in " practical elements of safety" In: Proceedings of the Twelfth Safety-critical Systems Symposium, Birmingham, UK. Springer-Verlag. ISBN 1-85233-800-8.
3. Andrews, J.W., Welch, J.D., Erzberger, H., 2005. Safety Analysis for Advanced Separation Concepts. In: USA/Europe ATM R&D Seminar, Baltimore, MD, 27-30 June, 2005.
4. Aviation Policy Group - Australia (APG), 2007. Joint Consultation Paper: Transition to Satellite Technology for Navigation & Surveillance. July, 2007.
5. Benediktsson O., Hunter R.B., McGettrick A.D. Processes for software in safety critical systems. Software Process: Improvement and Practice 2001, 6(1):47-62.
6. Bieder, C., Makins, N., 2002. Validation of safety aspects of novel ATM systems. In: Weikert, C. (Ed.), Human Factors and Safety in Aviation, Proceedings of a Conference September 26-27, 2002, Lund, Sweden, pp. 41-46.
7. Boehm B. Anchoring the software process. IEEE Software 1996, 13(4):73-82.
8. Brooker P. Consistent and up-to-date aviation safety targets. Aeronautical Journal 2004, 108(1085):345-356.
9. Brooker P. Air traffic safety: continued evolution or a new paradigm?. Aeronautical Journal 2008, 112(1132):333-344.
10. Brooker P. SESAR and NextGen: investing in new paradigms. Journal of Navigation 2008, 61(2):195-208.
11. Brooker P. Simple models for airport delays during transition to a trajectory-based air traffic system. Journal of Navigation 2009, 62(4):555-570.
12. Choroba, P., 2006. Comprehensive study of the wake vortex phenomena to the assessment of its incorporation to ATM for safety and capacity improvements. Doctor of Philosophy dissertation, University of Zilina. http://www.eurocontrol.int.
13. de Jong, H.H., 2004. Guidelines for the identification of hazards: how to make unimaginable hazards imaginable? Eurocontrol Contract, NLR-CR-2004-094.
14. Department of Defense, USA (DoD), 2006. VV&A Recommended Practices Guide (RPG). What is Simulation Validation and Why is it Important? http://vva.msco.mil.
15. EPISODE 3, 2008a. SESAR Detailed Operational Description: Arrival and Departure - High and Medium/Low Density Operations - E5. EC Project EPISODE 3 Consortium. Document ID. E3-D2.2-027 Version 3.0, 28-07-2008.
16. EPISODE 3, 2008b. SESAR Detailed Operational Description: Conflict Management in En-Route High & Medium/Low Density Operations - E6. EC Project EPISODE 3 Consortium. Document ID E3-D2.2-028. Version 3.0, 28-07-2008.
17. Eurocontrol, 2006. Safety Case Development Manual. DAP/SSH/091. 13 October, 2006.
18. Eurocontrol, 2007a. Eurocontrol EATMP, European Operational Concept Validation Methodology: E-OCVM, Version 2.0, 17 March, 2007.
19. Eurocontrol, 2007b. P-RNAV Safety Assessment FHA and PSSA. Edition No. V1.3. December, 2007. http://www.ecacnav.com.
20. European Commission, 2009. European Air Traffic Management Master Plan, first ed.
21. Everdij M.H.C., Blom H.A.P., Scholte J.J., Nollet J.W., Kraan B. Developing a framework for safety validation of multi-stakeholder changes in air transport operations. Safety Science 2009, 47(3):405-420.
22. FAA/Eurocontrol, 2005. Aviation System Safety Principles: Safety Action Plan-15. Version 2.0, June 10, 2005.
23. FAA/Eurocontrol, 2008. Operational concept validation strategy document. (E-OCVM) Action Plan 5: Validation and Verification strategies, Ed. 2.0a, 31 March, 2008.
24. Goldman, A.I., 1979. What is justified belief? In: Pappas, G. (Ed.), Justification and Knowledge. Reidel, pp. 1-23.
25. Goldman, A.I., 2008. Reliabilism. Stanford Encyclopedia of Philosophy. http://plato.stanford.edu.
26. Haraldsdottir, A., Scharl, J., Berge, M.E., Schoemig, E.G., Coats, M.L., 2007. Arrival Management with Required Navigation Performance and 3D Paths. 7th USA - Europe. ATM R&D Seminar.
27. Hodges, J.S., Dewar, J.A., 1992. Is it you or your model talking? A framework for model validation, Tech. Report R-J11J-AF/A/OSD, RAND Corporation P.O. Box 2138, Santa Monica, CA 90407-2138, USA.
28. Hollnagel, E., Woods, D.D., Leveson, N. (Eds.), 2006. Resilience Engineering: Concepts and Precepts. Ashgate.
29. ICAO, 1998. Manual on Airspace Planning Methodology for the Determination of Separation Minima. ICAO Doc 9689-AN/953.
30. Jackson, D., Thomas, M., Millett, L. (Eds.), 2007. Software for Dependable Systems: Sufficient Evidence? National Research Council. National Academies Press, 2007. http://books.nap.edu/openbook.php?isbn=0309103940.
31. Konikow L.F., Bredehoeft J.D. Ground-water models cannot be validated. Advances in Water Resources 1992, 15:75-83.
32. Lee, P., Prevot, T., Mercer, J., Smith, N., Palmer, E., 2005. Ground-side perspective on mixed operations with self-separating and controller-managed aircraft. In: The Sixth International ATM R&D Seminar ATM-2005, Baltimore, MD, July, 2005.
33. Leplat J. Occupational accident research and systems approach. New Technology and Human Error 1987, 181-191. John Wiley & Sons, New York. J. Rasmussen, K. Duncan, J. Leplat (Eds.).
34. Littlewood B. Predicting software reliability. Philosophical Transactions of the Royal Society 1989, 327:513-527.
35. MacKenzie D. Mechanizing Proof: Computing, Risk, and Trust 2001, MIT Press, Cambridge, Mass, (Chapter 9).
36. Marais, K., Dulac, N., Leveson, N.G., 2004. Beyond normal accidents and high reliability organizations: the need for an alternative approach to safety in complex systems. In: Engineering Systems Division Symposium. MIT, Cambridge, MA. http://sunnyday.mit.edu/papers/hro.pdf.
37. McDermid J.A., Kelly T.P. Software in safety critical systems: achievement and prediction. Nuclear Future 2006, 2(3):140-145.
38. Mueller, C., Nabelssi, B., Roglans-Ribas, J., Folga, S., Policastro, A., Freeman, W., Jackson, R., Mishima, J., Turner, S., 1996. Analysis of accident sequences and source terms at treatment and storage facilities for waste generated by US Department of Energy waste management operations. Argonne National Laboratory Technical Report. http://www.osti.gov/bridge/index.jsp.
39. OECD NEA, 2002. The Use and Development of Probabilistic Safety Assessment in NEA Member Countries. NEA/CSNI/R(2002)18, OECD, Nuclear Energy Agency, Committee on the Safety of Nuclear Installations, Paris, 2002, http://www.nea.fr.
40. Oreskes N., Shrader-Frechette K., Belitz K. Verification, validation, and confirmation of numerical models in the earth sciences. Science 1994, 263:641-646.
41. Pace, D.K., 2004. The referent in simulation development and assessment. Paper E04-SIW-024. In: Proc. 2004 European Simulation Interoperability Workshop. http://www.sisostds.org.
42. Pina, P.E., Hansman, R.J., 2007. Cognitive and Operational Implications of Non-homogeneous Aircraft Equipage for Aviation System Transformation. Report No. ICAT-2007-4. September 2007. http://hdl.handle.net/1721.1/42198.
43. Prevot, T., Homola, J., Mercer, J., 2008. Human-in-the-Loop Evaluation of Ground-Based Automated Separation Assurance for NextGen. AIAA, 2008-8885. The 26th Congress of International Council of the Aeronautical Sciences (ICAS) 14-19 September, 2008, Anchorage, Alaska.
44. Redmill F. Understanding the use, misuse and abuse of safety integrity levels. Proceedings of the Eighth Safety-critical Systems Symposium, Southampton, UK 2000, Springer.
45. Refsgaard J.C., Henriksen H.J. Modelling guidelines - terminology and guiding principles. Advances in Water Resources 2004, 27:71-82.
46. Rykiel E.R. Testing ecological models: the meaning of validation. Ecological Modelling 1996, 90:229-244.
47. Safety Regulation Commission (SRC), 2003. Eurocontrol Safety Regulatory Requirement 6, ESARR 6: Software in ATM Systems. Edition Date 1.0, 06 November 2003.
48. SESAR Joint Undertaking (SESARJU), 2010. Documents & reports webpage. http://www.sesarju.eu/news-press/documents-reports.
49. Sheridan, T.B., 2006. Next generation air transportation system: human-automation interaction and organizational risks. In: Resilience Engineering Symposium, Juan les Pins, France, November 8-10, 2006.
50. Shooman M.L. Reliability of Computer Systems and Networks: Fault Tolerance, Analysis, and Design 2002, John Wiley & Sons, Inc., New York.
51. Standar, M. 2008. SESAR - The Concept and Architecture. ICAO Forum on Integration and Harmonization of NextGen and SESAR into the Global ATM Framework. ICAO, Montreal.
52. Straeter, O., Leonhardt, J., Durrett, D., Hartung J., 2006. The dilemma of ill-defining the safety performance of systems if using a non-resilient safety assessment approach. In: 2nd Symposium on Resilience Engineering. Nice, France.
53. Thomas M. Issues in safety assurance. Computer Safety, Reliability and Security. LNCS 2788 2003, 1-7. Springer. S. Anderson, M. Felici, B. Littlewood (Eds.).
54. Ulfbratt, E., McConville, J., and contributors, 2008. Comparison of the SESAR and NextGen Concepts of Operations. NCOIC™ Aviation IPT. 1.0 May, 2008.
55. USA Environmental Protection Agency (EPA), 1997.Guiding Principles For Monte Carlo Analysis. Risk Assessment Forum, Washington, DC, EPA/630/R-97/001. http://www.epa.gov/ncea/raf/montecar.pdf.
56. USA Institute of Medicine of the National Academies, 2002. Escherichia coli O157:H7 in Ground Beef, Review of a Draft Risk Assessment. The National Academies Press, Washington, DC. http://www.nap.edu.
57. Vernon, G., Perrin, E., 2007. Methodology Report for a Safety Target Achievement Roadmap (STAR). Eurocontrol 10th May, 2007.
58. Wald, M.L., 2009. Is there a Place for Nuclear Waste? Scientific American August, pp. 40-47.
59. Wichman, K.D., Lindberg, L.G.V., Kilchert, L., Bleeker, O.F., 2003. Europe's emerging trajectory-based ATM environment. In: 22nd Digital Avionics Systems Conference, Indianapolis, USA.
60. Yucca Mountain Project, 1995. Las Vegas, Nevada Yucca Mountain Site Characterization Project Design Package 1C System Safety Analysis. Report No. BAB000000-01717-0200-00146, Rev. 01. http://www.osti.gov/bridge/index.jsp.