基于Petri网的系统安全性建模与分析技术研究
|
摘要
本文围绕当前系统安全性分析中存在的系统安全性模型描述与求解，以及安全性分析方法综合运用等问题进行研究。
目前安全性分析技术在动态系统安全性描述和分析方面存在很多困难，据此论文研究了在经典Petri网及其扩展模型的基础上进行描述和分析的思路，提出采用广义随机Petri网(GSPN)建立系统安全性模型的方法。在安全性定性分析方面，论文提出了关键状态的概念，给出了关键状态分析的搜索算法，研究了采用内锁和时间约束来消除高风险危险路径的方法。在安全性定量分析方面，我们研究发现去除消失标识后，GSPN的可达图与一个连续时间Markov过程(CTMP)是同构的，为此，可利用Markov过程方法进行分析。论文提出了基于Gauss-Seidel方法与动态行列技术的分析方法。在仿真方面，主要探讨了安全性定量分析中稀有事件问题的抽样技术，并提出采用重要性抽样法，以提高抽样效率。在技术方法综合运用方面，根据目前Petri网方法与传统的安全性分析方法结合不足，论文提出了一种综合了Petri网和传统安全性分析技术的方法。最后论文提出一种基于GSPN的系统安全性建模与分析系统的设计框架，并利用软件的原型系统对一个铁路系统进行了实例分析。
This dissertation focuses on the problems existing in current system safety analysis,especially,modeling and solution of safety system,and integration of methods of safety analysis.
There are still so many difficulties existing in the description and analysis of dynamic systems in current safety analysis techniques. In this case,we study the description and analysis idea based on classical Pctri Nets and its extension for safety systems,and present the way to model such systems using Generalized Stochastic Petri Nets (GSPN). For qualitative solution of the models,we define Critical States and bring forward an algorithm to work out the critical states of a safety system,so the path leading to high risk ha ard state can be eliminated with inner lock and time constraints,two of our new concepts. For quantitative solution,we study GSPN and find that the reachability graph of a GSPN is isomorphic to a Continuous Time Markov Process (CTMP) when the vanishing markings are eliminated,so Markov Process method can be used. And then we bring forward an approach to get the probability of steady-state based on Gauss-Seidel method and dynamic row-column techniques For the application of simulation in
safety' analysis,sampling techniques for sparse events are discussed,and importance sampling method is brought forward to increase sampling efficiency. For integration of methods of safety analysis,we study and bring forward an approach to combine Petri Nets based method with other traditional safety analysis methods in order to make use of the advantages of the two. At last,a design of System Safety Modeling And Analysis Software Based On GSPN is provided,and a case study on a railway system using this prototype software has been carried out.
目前安全性分析技术在动态系统安全性描述和分析方面存在很多困难，据此论文研究了在经典Petri网及其扩展模型的基础上进行描述和分析的思路，提出采用广义随机Petri网(GSPN)建立系统安全性模型的方法。在安全性定性分析方面，论文提出了关键状态的概念，给出了关键状态分析的搜索算法，研究了采用内锁和时间约束来消除高风险危险路径的方法。在安全性定量分析方面，我们研究发现去除消失标识后，GSPN的可达图与一个连续时间Markov过程(CTMP)是同构的，为此，可利用Markov过程方法进行分析。论文提出了基于Gauss-Seidel方法与动态行列技术的分析方法。在仿真方面，主要探讨了安全性定量分析中稀有事件问题的抽样技术，并提出采用重要性抽样法，以提高抽样效率。在技术方法综合运用方面，根据目前Petri网方法与传统的安全性分析方法结合不足，论文提出了一种综合了Petri网和传统安全性分析技术的方法。最后论文提出一种基于GSPN的系统安全性建模与分析系统的设计框架，并利用软件的原型系统对一个铁路系统进行了实例分析。
This dissertation focuses on the problems existing in current system safety analysis,especially,modeling and solution of safety system,and integration of methods of safety analysis.
There are still so many difficulties existing in the description and analysis of dynamic systems in current safety analysis techniques. In this case,we study the description and analysis idea based on classical Pctri Nets and its extension for safety systems,and present the way to model such systems using Generalized Stochastic Petri Nets (GSPN). For qualitative solution of the models,we define Critical States and bring forward an algorithm to work out the critical states of a safety system,so the path leading to high risk ha ard state can be eliminated with inner lock and time constraints,two of our new concepts. For quantitative solution,we study GSPN and find that the reachability graph of a GSPN is isomorphic to a Continuous Time Markov Process (CTMP) when the vanishing markings are eliminated,so Markov Process method can be used. And then we bring forward an approach to get the probability of steady-state based on Gauss-Seidel method and dynamic row-column techniques For the application of simulation in
safety' analysis,sampling techniques for sparse events are discussed,and importance sampling method is brought forward to increase sampling efficiency. For integration of methods of safety analysis,we study and bring forward an approach to combine Petri Nets based method with other traditional safety analysis methods in order to make use of the advantages of the two. At last,a design of System Safety Modeling And Analysis Software Based On GSPN is provided,and a case study on a railway system using this prototype software has been carried out.
引文
[1] 国防科工委军用标准化中心，“系统安全性通用大纲”实施指南，1993
[2] System Safety Engineering; Rept on Test Operation Procedure, AD-A168 737/5
[3] MIL-STD-882D, Standard Practice for System Safety Program Requirements, Jan 1996
[4] Lewis, H.W. et al., Risk Assessment Review Group Report to the U.S. Nuclear Regulatory Commission, US Nuclear Regulatory Commission, Washington, DC, 1978, USA, NUREG/CR-0400.
[5] Geoff Wells, Hazard Identification and Risk Assessment, Institution of Chemical Engineers, 1996
[6] A.E.P. Brown, Hazard Identification Analysis of a Hydrogen Plant, Process Safety Process, 1999, Vol. 18, No.3, 166-169
[7] 《潜通电路分析》译文集，1991年航天部12所
[8] Boeing, Sneak Circuit Analysis of F-8 Digital Fly-By-Wire Aircraft, D2-118582-1,Mar 1976.
[9] Laura M. Ippolito & Dolores R. Wallace, A Study on Hazard Analysis in High Integrity Software Standards and Guidelines, NISTIR, Jan. 1995
[10] Papoulis, A., Probability, Random Variables, and Stochastic Process. McGraw-Hill, New York, USA, 1965
[11] N. Siu. Risk assessment for dynamic systems: An overview, Reliability Engineering and System Safety 43 (1994) 43-73
[12] Thomas J. DiCiccio, Peter W. Glynn, Note: On the value of Function Evaluation Location Information in Monte Carlo Simulation, Management Sci., 1995, 41(4): 733～735
[13] Joanne Bechta Dugan, Modular Techniques for Dynamic Fault-tree Analysis, Proceedings of the 1992 Annual Reliability and Maintainability Symposium, Patterson-Hine4, F.A, 105-111
[14] Joanne Bechta Dugan, Salvatore Bavuso & Mark Boud, Dynamic Fault Tree Models for Fault Tolerant Computer Systems, IEEE Transaction on Reliability, September 1992.
[15] Janusz Gorski, Formalising Fault Trees, Proceedings of the Third Safety-Critical Systems Symposium, February7-9, 1995, Pozanan-Kiekrz, Poland
[16] 周经伦，非单调关联系统可靠性分析技术研究，国防科技大学博士论文，2000年5月
[17] Daniel D. Deavours & William H. Sanders, "On-the-Fly" Solution Techniques for Stochastic Petri Nets and Extensions, IEEE Transactions on Software Engineering. Vol.24, NO.10, October 1998, 889-902
[18] 金光，动态系统可靠性建模与高可靠度系统仿真研究，国防科技大学博士论文，2000年4月
[19] Steven A. Lapp, Computer-aided Synthesis of Fault-trees, IEEE Transactions on Reliability, April 1997
[20] D. B. HARRIES, Operability Studies and Hazard Analysis in the Management of Safey, Proceeding of the Safety and Reliability Society Symposium, September 19-20, 1990, Altrinchan, UK
[21] Joseph Fiksel, Knowledge System for Planning Support, IEEE Expert, FALL 1989, 16-23
[22] J. Wang, M. Modarres, Probabilistic Risk Assessment, A Look at the Role of Artifical Intelligece, Nuclear Engineering Design 106 (1998) 375-387
[23] FTAS技术手册，国防科技大学系统工程研究所，1996年
[24] Bryen Martin, A Practical Approach to Probabilistic Risk Assessment, Proceeding of the European Safety and Reliability Conference '92, June 10-12, 1992, Copenhagen, Denmark
[25] 袁崇义，Petri网原理，电子工业出版社，1998年4月
[26] 包卫东，C~3I系统一体化仿真方法与环境研究，国防科技大学博士论文，1999年4月
[27] G Berthelot & R. Terrat, Petri Nets Theory for the Correctness of Protocols, IEEE Trans. Commun., Vol. COM-30, No. 12, 2497-2505, 1982
[28] M. Diaz & P. Azema, Petri Net Based Models for the Specification and Validation of Protocols, Lecture Notes in Computer Science, Vol.188. New York: Springer-Verlag, 101-121, 1985
[29] M. Diaz, Modeling and Analysis of Communication and Cooperation Protocols Using Petri Net Based Models, Comput. Networks, Vol.6, 419-441, 1982
[30] M.A.Holliday & Mary K.Venon, A Generalized Timed Petri Net Model for Performance Analysis, IEEE Trans. Software Eng., Vol. SE-13, No. 12, 1297-1310, 1987
[31] J.Magott, Performance Evaluation of Concurrent Systems Using Petri Nets, Inform. Processing Lett., Vol. 18, No. 1, 7-13, 1984
[32] M.K.MolIy, Performance Analysis Using Stochastic Petri Nets, IEEE Trans. Computers, Vol.C-31, No.9, 913-917,1982
[33] H.Alla, P. Ladet, J.Martinez & M.Silva-Suarez, Modeling and Validation of Complex Systems by Coloured Petri Nets; Application to a Flexible Manufacturing System, LectureNotes in Computer Science, Vol. 188. New York: Springer-Verlag, 15-31, 1985
[34] J.Martinez, H.Alla & M.Silva, Petri Nets for the Specification of Flexible Manufacturing Systems, Modeling and Design of Flexible Manufacturing Systems, New York. Elsevier Science Publ., 389-406, 1986
[35] T. Murata & M. Silva, Special Sessions on Petri Nets and Flexible Manufacturing, Proceedings of IEEE Int. Conf. Robotics Automat., 999-1018 and 1160-1185
[36] P. Azema & B. Berthomieu, The Design and Validation by Petri Nets of a Mechanism for the Invocation of Remote Servers, Information Processing80, S.H.Lavington, Ed., 599-604, 1980
[37] S.S.Yau & M.U.Caglayan, Distributed Software System Design Representation Using Modified Petri Nets, IEEE Trans. Software Eng., Vol.SE-9, No.6,733-745, Nov, 1983
[38] M. T. Ozsu, Modeling and Analysis of Distributed Database Concurrency Control Algorithms Using an Extended Petri Net Formalism, IEEE Trans. Software Eng., Vol. SE-11, No.10, 1225-1240,1985
[39] J.B.Dugan & G Ciardo, Stochastic Petri Net Analysis of a Replicated File System, Special Section of Petri Net Performance Models in IEEE Trans. Software Eng., Vol. 15, No.4, 394-401, 1989
[40] W. Kluge, Reduction, Data Flow and Control Flow Models of Computation, LNCS, Vol.255[17], 466-498, 1987
[41] T. Smigelski, T. Murata & M. Sowa, ATimed Petri Net Model and Simulation of Dataflow Computer, Proc. Int. Workshop Timed Petri Nets, Torino, Italy, July 1-3, 1985, 55-63
[42] N.G. Leveson & J. L. Stolzy, Safety Analysis Using Petri Nets, IEEE Trans. Software Eng, Vol.SE-13, No.3, 386-397,1987
[43] M. Lu, D.Zhang & T. Murata, Stochastic Net Model for Self-Stability Measures of Fault-Tolerant Clock Synchronization, Proc. Int. Workshop Petri Nets and Performance Models, 104-110, 1987
[44] S. Kumagai, H. Shiizuka & S. Kodama, Optimal Realization of Fault-Tolerant Decision-free Concurrent Systems, Proc. 28~(th) Midwest Symposium Circuits and Systems, 253-256, 1985
[45] 张维明，邓苏，罗雪山等，信息系统建模技术与应用，电子工业出版社，1997年10月，第一版
[46] Tadao Murata, PetriNets: Properties, Analysis and Applications, Proceedings of the IEEE, Vol. 77, No. 4, 1989, 541-580
[47] J. L. Peterson, Petri Net Theory and Modeling of Systems, Prentice Hall, 1981
[48] R．大卫，H．奥兰(著)，黄建文等(译)佩特利网和逻辑控制器图形化表示工具(GRAFCET)，机械工业出版社，1996年4月第一版
[49] Mark A. Holliday, A Generalized Timed Petri Net Model for Performance Analysis, IEEE Transactions on Software Engineering. Vol. SE-13, No. 12, December 1987, 1297-1310
[50] Bernard Berthomieu & Michel Diaz, Modeling and Verification of Time Dependent Systems Using Time Petri Nets, IEEE Transactions on Software Engineering. Vol. 17, No.3, March 1991, 259-273
[51] Alois Ferscha, Concurrent Execution of Timed Petri Nets, Proceeding of the 1994 Winter Simulation Conference, 229-236
[52] 林闯，随机Petri网和系统性能评价，清华大学出版社，2000年1月第一版
[53] T. S. Liu & S. B. Chiou, The Application of Petri Nets to Failure Analysis, Reliability Engineering and System Safety, 57(1997), 129-142
[54] G Florin, C. Fraize & S. Natkin, Stochastic Petri Nets: Properties, Applications and Tools, Microelectron. Reliab. Vol. 31, No.4, 669-697, 1991
[55] M. Ajmone, Marsan, G Balbo, etc, An Introduction to Generalized Stochastic Petri Nets, Microelectron. Reliab. Vol. 31, No.4, 699-725, 1991
[56] W. M Zuberek, Timed Petri Nets: Definition, Properties, and Applications, Microelectron. Reliab. Vol. 31, No.4, 627-644, 1991
[57] W. M. Zuberek, Performance Evaluation Using Unbound Timed Petri Nets, Proc. of the Third International Workshop on Petri Nets and Performance Models, Kyoto, Japan, 1989, 180-186
[58] W. M. Zuberek, Performance Evaluation Using Unbounded Timed Petri Nets, 1989IEEE, 180-186
[59] Guat Yew Tan, Gurdeep Singh Hura, MASE: A User-Friendly Performance Tool, Microelectran Rel, 1996, 36(6): 821～841
[60] 严加安，随机分析学简介，95年全国数学研究生暑期学校教材，武汉大学数学系印
[61] Joanne Bechta Dugan & Bharath Venkataraman, DIFtree: A Software Package for the Analysis of Dynamic Fault Tree Models, 1997 Proceedings Annual Reliability and Maintainability Symposium, 64-70
[62] Paul C. Jorgensen & Wade A. Smith, Using Petri Net Theory to Analyze Software Safety Case Studies, 22-25
[63] Seung Mo Cho, Hyoung Seok Hong & Sung Deok Cha, Safety Analysis Using Coloured Petri Nets, 1996 IEEE, 176-183
[64] Hang Seong Son & Poong Hyun Seong, A Safety Analysis Method Using Fuzzy Petri Nets, 412-415
[65] Ouali M-S., Ait-Kadi D., etc, Fault Diagnosis Model Based on Petri Net With Fuzzy Colors, Computers & Industrial Engineering 37(1999), 173-176
[66] G. Nowak, E. Niel & A. Jutard, Specification method based on temporal SADT and Deterministic/Stochastic Petri Nets - Application to Safety assessment, 1996 IEEE, 163-166
[67] A. Bourjij, M Zasadzinski, etc, On the Use of Hybrid Petri Nets for Control Process Safety: Application to a Steam-Boilers Network Simulator, 197-202
[68] 罗鹏程，周经伦，基于Petri网的系统安全性分析，信息与决策系统，97年第3卷第3期，73-77
[69] Jinglun Zhou, Pengcheng Luo, System Safety Analysis Based On Petri Nets, CJCRAM'98, Nov. 98
[70] Laura L. Pullum等，用于分析复杂的计算机应用系统的故障树模型，97美R&M年会论文选译．质量与可靠性简报，第九十六期，1999年12月10日
[71] Aad P A. Van Moorsel, E. R. Haverkort, Probabilistic Evaluation for the Analytical Solution of Large Markov Models: Algorithms and Tool Support, Microelectran Rel., 1996, 36(6): 733～755
[72] P.布雷特利，B.L.福克斯，L．E．舒瑞茨著，杨维高等译，模拟导论，机械工业出版社，1991
[73] Ricky W. Butler, An Abstract Language for Specifying Markov Reliability Models, IEEE Trans. Rel., 1986, R-35(5): 595～601
[74] Micheal S. Bridgman, William G. Ness, Automated Ultrareliability Models: A Review, 1984 Proc. Annual Rel. Maintainability Sym., 396～402
[75] M. Malhotra, K. S. Trivedi, A Methodology for Formal Expression of Hierarchy in Model Solution, Proc. 5~(th) International Workshop on Petri Nets and Performance Models, 1993:258～267
[76] Guat Yew Tan, Gurdeep Singh Hura, MASE: A User-Friendly Performance Tool, Microelectran Rel, 1996, 36(6): 821～841
[77] Thomas A. Montgomery, David Richard Pugh, etc, FMEA Automation for the Complete Design Process, 1996 Proceedings Annual Reliability and Maintainability Symposium, 30-36
[78] 梅启智，廖炯生等，系统可靠性工程基础，科学出版社，1987年2月第一版
[79] 系统安全性工程手册，中华人民共和国军用标准，GJB/Z99-97，国防工业出版社，1998
[80] 周经伦等．计算机辅助安全性分析，计算机应用研究，1997年，第6期，22-24
[81] 曾天翔 主编，杨先振，王维翰 副主编，可靠性及维修性工程手册(上册)，国防工业出版社，1994年9月
[82] System Safety Analysis Handbook. System Safety Society, U.S.A. July 1993
[83] 张忠任等，驾驭经营风险之道，北京：经济管理出版社，1996
[84] Gong Shiyu, Yah Zhaolin, Zhou Jinglun, System Safety Analysis Based on Accident Mechanism, 2000 International Symposium on Safety and Technology, Beijing
[85] P. M. Merlin & D. J. Farber, Recoverability of Communication Protocols-Implications of a Theoretical Study, IEEE Trans. Commun., Vol. Com-24, 1976, 1036-1043
[86] P. Azema & M. Diaz, Checking Experiments for Concurrent Systems, Proc. FTCS-7, June 1977, 206
[87] Jeffrey J. E Tsai, Steve Jennhwa Yang, Yao-Hsiung Chang, Timing Constraint Petri Nets and Their Application to the Schedulability Analysis of Real-Time 2002123077.113.tif
[88]Gianfranco Ciardo, A Characterization of the Stochastic Process Underlying a stochastic Petri Net, IEEE Transactions on Software Engineering, Vol. 20, No.7, 1994, 506-515
[89] Peter W. Glynn, A GSMP Formalism for Discrete Event Systems, Proceedings of the IEEE, Vol.77, No.1, Jan. 1989, 14-23
[90]B. Plateau & K. Atif, Stochastic Automata Network for Modeling Parallel Systems, IEEE Trans. Software Eng., Vol. 17, No.10, Oct. 1991, 1093-1108
[91]W. J. Stewart, Introduction to the Numerical Solution of Markov Chain, Princeton Univ. Press, 1994
[92]P. Kemper, Numerical Analysis of Superposed GSPNs, Proc. Sixth Int'l Workshop Petri Nets and Performance Models, 52-61, Durham, N.C., Oct. 1995
[93]P. Kemper, Numerical Analysis of Superposed GSPNs, IEEE Trans. Software Eng., Vol. 22, No.9, 615-628, Sept. 1996
[94]G. Ciardo & M. Tilgner, On the Use of Kronecker Operators for the Solution of Generalized Stochastic Petri Nets, ICASE Report #96-35 CR-198336, NASA Langley Research Center, May 1996
[95]李庆扬，王能超，易大义，数值分析，华中理工大学出版社，1986年第三版
[96]金光，高可靠度仿真基本原理与方法，国防科技大学硕士论文，1997年4月
[97]徐钟济，蒙特卡罗方法，上海科学技术出版社，1985年6月
[98]A. Sharif Heger, Billy V. Koen, Hanspeter E Wegmann, Parallel Processing of Fault Trees on a Locally Distributed Multiple-Processor Network, IEEE Trans. Rel., 1993, 42(3): 436～441
[99]Bruno R. Preiss, Wayne M. Loucks, V. Carl Hamacher, A Unified Modeling Methodology for Performance Evaluation of Distributed Discrete Event Simulation Mechanisms, 1988 Winter Simu. Conf., 315～324
[100]Albert H. Moore, H. Leon Harter, Robert C. Snead, Comparison of Monte Carlo Techniques for Obtaining System-Reliability Confidence Limits, IEEE Trans. Rel., 1980, R-29(4): 327～331
[101] Manuel Villn-Altamiranno, Jos Vill n-Altamirano, RESTART: A Straightforward Method for Fast Simulation of Rare Events. Proceed, 1994 Winter Simu. Conf., 282～289
[102] Roy Billinton, Anuapoorani Sankarakrishan, A System State Transition Sampling Technique for Reliability Evaluation, Rel. Eng. Sys. Saf., 1994, 44: 131～134
[103] Acclo M. De O. Porta Nova, James R. Wilson, Using Control Variables to Estimate Multresponse Simulation Metamodels, Proc. 1986 Winter Simu. Conf., 326～334
[104] R. Cranley, T. N. Patterson, Randomization of Number Theoretic Methods for Multiple Integration, SIAM J. Numer. Anal., 1976, 13(6): 904～914
[105] Jerome Spanier, Eral H. Maize, Quasi-Random Methods for Estimating Integrals Using Relatively Small Samples, SIAM Review, 1994, 36(1): 18～44
[106] Marvin K. Nakayama, General Conditions for Bounded Relative Error in Simulations of Highly Reliable Markovian Systems, Adv. Appl. Prob., 1996, 28: 687～727
[107] Hiromitsu Kumamoto, Kazuo Tanaka, Koichi Inoue, Ernest J. Henley, Dagger-Sampling Monte carlo for System, Unavailability Evaluation, IEEE Trans. Rel., 1980, R-29(2): 122～125
[108] George S. Fishman, A Comparison of Four Monte Carlo Methods for Estimating the Probability of s-t Connectedness, IEEE Trans. Rel., 1986, R-35(2): 145～154
[109] 欧·亨利等著，吕应中等译，可靠性工程与风险分析，原子能出版社，1988年2月
[110] Darush Davani, Parameteric What-If Analysis in MTTF: A Single-Run Monte-Carlo Based Approach, Microelectran Rel., 1994: 34(2): 275～281
[111] G.C. Oliveira, M. V. F. Pereira, S.H.F. Cunha, A Technique for Reducing Computational Effort in Monte-Carlo Based Composite Reliability Evaluation, IEEE Trans. Power Sys., 1989, 4(4): 1309～1315
[112] I.M. Sobol, On Quasi-Monte Carlo Intergrations, Math. Comp. Simu. Math. Comp. Simu., 1998, 47: 103～1112
[113] Robert Geist, Extended Behavioral Decomposition for Estimating Ultrahigh Reliability, IEEE Trans. Rel., 1991, 40(1): 22～27
[114] A. C. M Hpomans, J. P. C. Kleijnen, Importance Sampling in Systems Simulation, A Pratical Failure? Math. Comp. Simu., 1979, ⅩⅪ 209～220
[115] P. Ney, E. Nummelin, Markov Additive Processes Ⅱ. Large Deviations, Annals Prob., 1987, 15(2): 593～609
[116] Peter Nex, Dominating Points and the Asymptotics of Large Deviations for Random Walk on R~d, Annals Prob., 1983, 11(1): 158～167
[117] Marie Cottrell, Jean-Claude Fort, Gerard Malgouyres, Large Deviations and Rare Events in the Study of Stochastic Algorithms, IEEE Trans. Auto. Contr., 1983, AC-28(9): 907～920
[118] James A Bucklew, Peter Ney, John S. Sadowsky, Monte Carlo Simulation and Large Deviations Theory for Uniformly Recurrent Markov Chains, J. Appl. Prob., 1990, 27: 44～59
[119] T. Lehtonen, H. Nyrhinen, Simulating Level-Crossing Probabilities by Importance Sampling, Adv. Appl. Prob., 1992, 24: 858～874
[120] Peter W. Glynn, Some Topics in Regenerative Steady-State Simulation, Acta Appl. Math., 1994, 34: 225～236
[121] Ambuj Goyal, Perwez Shahabuddin, Philip Heidelberger, Victor F. Nicola, Peter W. Glynn, A Unified Framework for Simulating Markovian Models of Highly Dependable Systems, IEEE Trans. Comp., 1992, 41(1): 36～51
[122] Peter W. Glynn, Donald Iglehart, Importance Sampling for Stochastic Simulations, Management Sci., 1989, 35(11): 1367～1392
[123] Peter L. Goddard, A Combined Analysis Approach to Assessing Requirements for Safety Critical Real-Timed Control Systems, 1996 Proceedings Annual Reliability and Maintainbility Symposium, 110-115
[124] 林闯，张彤，一种生成具有变量标识的高级Petri网可达树的算法，计算机学报，1991年8月，第8期，596-604
[125] Ernst W. Mayr, An Algorithm for the General Petri Net Reachability Problem, SIAM J. Comput.vol. 13, No. 3, Aug. 1984, 441-460
[126] Gianfranco Ciardo & Andrew S. Miner, Storage Alternatives for Large Structured State Spaces
[127] D.E. Knuth, Sorting and Searching, Addison-Wesley, Reading, MA, 1973
[128] G. Chiola, Compiling Techniques for the Analysis of Stochastic Petri Nets, Proc. 4~(th) Int. Conf. On Modeling Techniques and Tools for Performance Evaluation, 1989, 13-27
[129] 林闯，随机Petri网模型的精化设计，软件学报，2000．11(1)，104-109
[130] 国防科工委军用标准化中心，“故障模式、影响及危害性分析程序”“故障树分析”实施指南，1994
[131] 颜兆林，系统安全性分析技术研究，国防科技大学博士论文，2001年5月
[2] System Safety Engineering; Rept on Test Operation Procedure, AD-A168 737/5
[3] MIL-STD-882D, Standard Practice for System Safety Program Requirements, Jan 1996
[4] Lewis, H.W. et al., Risk Assessment Review Group Report to the U.S. Nuclear Regulatory Commission, US Nuclear Regulatory Commission, Washington, DC, 1978, USA, NUREG/CR-0400.
[5] Geoff Wells, Hazard Identification and Risk Assessment, Institution of Chemical Engineers, 1996
[6] A.E.P. Brown, Hazard Identification Analysis of a Hydrogen Plant, Process Safety Process, 1999, Vol. 18, No.3, 166-169
[7] 《潜通电路分析》译文集，1991年航天部12所
[8] Boeing, Sneak Circuit Analysis of F-8 Digital Fly-By-Wire Aircraft, D2-118582-1,Mar 1976.
[9] Laura M. Ippolito & Dolores R. Wallace, A Study on Hazard Analysis in High Integrity Software Standards and Guidelines, NISTIR, Jan. 1995
[10] Papoulis, A., Probability, Random Variables, and Stochastic Process. McGraw-Hill, New York, USA, 1965
[11] N. Siu. Risk assessment for dynamic systems: An overview, Reliability Engineering and System Safety 43 (1994) 43-73
[12] Thomas J. DiCiccio, Peter W. Glynn, Note: On the value of Function Evaluation Location Information in Monte Carlo Simulation, Management Sci., 1995, 41(4): 733～735
[13] Joanne Bechta Dugan, Modular Techniques for Dynamic Fault-tree Analysis, Proceedings of the 1992 Annual Reliability and Maintainability Symposium, Patterson-Hine4, F.A, 105-111
[14] Joanne Bechta Dugan, Salvatore Bavuso & Mark Boud, Dynamic Fault Tree Models for Fault Tolerant Computer Systems, IEEE Transaction on Reliability, September 1992.
[15] Janusz Gorski, Formalising Fault Trees, Proceedings of the Third Safety-Critical Systems Symposium, February7-9, 1995, Pozanan-Kiekrz, Poland
[16] 周经伦，非单调关联系统可靠性分析技术研究，国防科技大学博士论文，2000年5月
[17] Daniel D. Deavours & William H. Sanders, "On-the-Fly" Solution Techniques for Stochastic Petri Nets and Extensions, IEEE Transactions on Software Engineering. Vol.24, NO.10, October 1998, 889-902
[18] 金光，动态系统可靠性建模与高可靠度系统仿真研究，国防科技大学博士论文，2000年4月
[19] Steven A. Lapp, Computer-aided Synthesis of Fault-trees, IEEE Transactions on Reliability, April 1997
[20] D. B. HARRIES, Operability Studies and Hazard Analysis in the Management of Safey, Proceeding of the Safety and Reliability Society Symposium, September 19-20, 1990, Altrinchan, UK
[21] Joseph Fiksel, Knowledge System for Planning Support, IEEE Expert, FALL 1989, 16-23
[22] J. Wang, M. Modarres, Probabilistic Risk Assessment, A Look at the Role of Artifical Intelligece, Nuclear Engineering Design 106 (1998) 375-387
[23] FTAS技术手册，国防科技大学系统工程研究所，1996年
[24] Bryen Martin, A Practical Approach to Probabilistic Risk Assessment, Proceeding of the European Safety and Reliability Conference '92, June 10-12, 1992, Copenhagen, Denmark
[25] 袁崇义，Petri网原理，电子工业出版社，1998年4月
[26] 包卫东，C~3I系统一体化仿真方法与环境研究，国防科技大学博士论文，1999年4月
[27] G Berthelot & R. Terrat, Petri Nets Theory for the Correctness of Protocols, IEEE Trans. Commun., Vol. COM-30, No. 12, 2497-2505, 1982
[28] M. Diaz & P. Azema, Petri Net Based Models for the Specification and Validation of Protocols, Lecture Notes in Computer Science, Vol.188. New York: Springer-Verlag, 101-121, 1985
[29] M. Diaz, Modeling and Analysis of Communication and Cooperation Protocols Using Petri Net Based Models, Comput. Networks, Vol.6, 419-441, 1982
[30] M.A.Holliday & Mary K.Venon, A Generalized Timed Petri Net Model for Performance Analysis, IEEE Trans. Software Eng., Vol. SE-13, No. 12, 1297-1310, 1987
[31] J.Magott, Performance Evaluation of Concurrent Systems Using Petri Nets, Inform. Processing Lett., Vol. 18, No. 1, 7-13, 1984
[32] M.K.MolIy, Performance Analysis Using Stochastic Petri Nets, IEEE Trans. Computers, Vol.C-31, No.9, 913-917,1982
[33] H.Alla, P. Ladet, J.Martinez & M.Silva-Suarez, Modeling and Validation of Complex Systems by Coloured Petri Nets; Application to a Flexible Manufacturing System, LectureNotes in Computer Science, Vol. 188. New York: Springer-Verlag, 15-31, 1985
[34] J.Martinez, H.Alla & M.Silva, Petri Nets for the Specification of Flexible Manufacturing Systems, Modeling and Design of Flexible Manufacturing Systems, New York. Elsevier Science Publ., 389-406, 1986
[35] T. Murata & M. Silva, Special Sessions on Petri Nets and Flexible Manufacturing, Proceedings of IEEE Int. Conf. Robotics Automat., 999-1018 and 1160-1185
[36] P. Azema & B. Berthomieu, The Design and Validation by Petri Nets of a Mechanism for the Invocation of Remote Servers, Information Processing80, S.H.Lavington, Ed., 599-604, 1980
[37] S.S.Yau & M.U.Caglayan, Distributed Software System Design Representation Using Modified Petri Nets, IEEE Trans. Software Eng., Vol.SE-9, No.6,733-745, Nov, 1983
[38] M. T. Ozsu, Modeling and Analysis of Distributed Database Concurrency Control Algorithms Using an Extended Petri Net Formalism, IEEE Trans. Software Eng., Vol. SE-11, No.10, 1225-1240,1985
[39] J.B.Dugan & G Ciardo, Stochastic Petri Net Analysis of a Replicated File System, Special Section of Petri Net Performance Models in IEEE Trans. Software Eng., Vol. 15, No.4, 394-401, 1989
[40] W. Kluge, Reduction, Data Flow and Control Flow Models of Computation, LNCS, Vol.255[17], 466-498, 1987
[41] T. Smigelski, T. Murata & M. Sowa, ATimed Petri Net Model and Simulation of Dataflow Computer, Proc. Int. Workshop Timed Petri Nets, Torino, Italy, July 1-3, 1985, 55-63
[42] N.G. Leveson & J. L. Stolzy, Safety Analysis Using Petri Nets, IEEE Trans. Software Eng, Vol.SE-13, No.3, 386-397,1987
[43] M. Lu, D.Zhang & T. Murata, Stochastic Net Model for Self-Stability Measures of Fault-Tolerant Clock Synchronization, Proc. Int. Workshop Petri Nets and Performance Models, 104-110, 1987
[44] S. Kumagai, H. Shiizuka & S. Kodama, Optimal Realization of Fault-Tolerant Decision-free Concurrent Systems, Proc. 28~(th) Midwest Symposium Circuits and Systems, 253-256, 1985
[45] 张维明，邓苏，罗雪山等，信息系统建模技术与应用，电子工业出版社，1997年10月，第一版
[46] Tadao Murata, PetriNets: Properties, Analysis and Applications, Proceedings of the IEEE, Vol. 77, No. 4, 1989, 541-580
[47] J. L. Peterson, Petri Net Theory and Modeling of Systems, Prentice Hall, 1981
[48] R．大卫，H．奥兰(著)，黄建文等(译)佩特利网和逻辑控制器图形化表示工具(GRAFCET)，机械工业出版社，1996年4月第一版
[49] Mark A. Holliday, A Generalized Timed Petri Net Model for Performance Analysis, IEEE Transactions on Software Engineering. Vol. SE-13, No. 12, December 1987, 1297-1310
[50] Bernard Berthomieu & Michel Diaz, Modeling and Verification of Time Dependent Systems Using Time Petri Nets, IEEE Transactions on Software Engineering. Vol. 17, No.3, March 1991, 259-273
[51] Alois Ferscha, Concurrent Execution of Timed Petri Nets, Proceeding of the 1994 Winter Simulation Conference, 229-236
[52] 林闯，随机Petri网和系统性能评价，清华大学出版社，2000年1月第一版
[53] T. S. Liu & S. B. Chiou, The Application of Petri Nets to Failure Analysis, Reliability Engineering and System Safety, 57(1997), 129-142
[54] G Florin, C. Fraize & S. Natkin, Stochastic Petri Nets: Properties, Applications and Tools, Microelectron. Reliab. Vol. 31, No.4, 669-697, 1991
[55] M. Ajmone, Marsan, G Balbo, etc, An Introduction to Generalized Stochastic Petri Nets, Microelectron. Reliab. Vol. 31, No.4, 699-725, 1991
[56] W. M Zuberek, Timed Petri Nets: Definition, Properties, and Applications, Microelectron. Reliab. Vol. 31, No.4, 627-644, 1991
[57] W. M. Zuberek, Performance Evaluation Using Unbound Timed Petri Nets, Proc. of the Third International Workshop on Petri Nets and Performance Models, Kyoto, Japan, 1989, 180-186
[58] W. M. Zuberek, Performance Evaluation Using Unbounded Timed Petri Nets, 1989IEEE, 180-186
[59] Guat Yew Tan, Gurdeep Singh Hura, MASE: A User-Friendly Performance Tool, Microelectran Rel, 1996, 36(6): 821～841
[60] 严加安，随机分析学简介，95年全国数学研究生暑期学校教材，武汉大学数学系印
[61] Joanne Bechta Dugan & Bharath Venkataraman, DIFtree: A Software Package for the Analysis of Dynamic Fault Tree Models, 1997 Proceedings Annual Reliability and Maintainability Symposium, 64-70
[62] Paul C. Jorgensen & Wade A. Smith, Using Petri Net Theory to Analyze Software Safety Case Studies, 22-25
[63] Seung Mo Cho, Hyoung Seok Hong & Sung Deok Cha, Safety Analysis Using Coloured Petri Nets, 1996 IEEE, 176-183
[64] Hang Seong Son & Poong Hyun Seong, A Safety Analysis Method Using Fuzzy Petri Nets, 412-415
[65] Ouali M-S., Ait-Kadi D., etc, Fault Diagnosis Model Based on Petri Net With Fuzzy Colors, Computers & Industrial Engineering 37(1999), 173-176
[66] G. Nowak, E. Niel & A. Jutard, Specification method based on temporal SADT and Deterministic/Stochastic Petri Nets - Application to Safety assessment, 1996 IEEE, 163-166
[67] A. Bourjij, M Zasadzinski, etc, On the Use of Hybrid Petri Nets for Control Process Safety: Application to a Steam-Boilers Network Simulator, 197-202
[68] 罗鹏程，周经伦，基于Petri网的系统安全性分析，信息与决策系统，97年第3卷第3期，73-77
[69] Jinglun Zhou, Pengcheng Luo, System Safety Analysis Based On Petri Nets, CJCRAM'98, Nov. 98
[70] Laura L. Pullum等，用于分析复杂的计算机应用系统的故障树模型，97美R&M年会论文选译．质量与可靠性简报，第九十六期，1999年12月10日
[71] Aad P A. Van Moorsel, E. R. Haverkort, Probabilistic Evaluation for the Analytical Solution of Large Markov Models: Algorithms and Tool Support, Microelectran Rel., 1996, 36(6): 733～755
[72] P.布雷特利，B.L.福克斯，L．E．舒瑞茨著，杨维高等译，模拟导论，机械工业出版社，1991
[73] Ricky W. Butler, An Abstract Language for Specifying Markov Reliability Models, IEEE Trans. Rel., 1986, R-35(5): 595～601
[74] Micheal S. Bridgman, William G. Ness, Automated Ultrareliability Models: A Review, 1984 Proc. Annual Rel. Maintainability Sym., 396～402
[75] M. Malhotra, K. S. Trivedi, A Methodology for Formal Expression of Hierarchy in Model Solution, Proc. 5~(th) International Workshop on Petri Nets and Performance Models, 1993:258～267
[76] Guat Yew Tan, Gurdeep Singh Hura, MASE: A User-Friendly Performance Tool, Microelectran Rel, 1996, 36(6): 821～841
[77] Thomas A. Montgomery, David Richard Pugh, etc, FMEA Automation for the Complete Design Process, 1996 Proceedings Annual Reliability and Maintainability Symposium, 30-36
[78] 梅启智，廖炯生等，系统可靠性工程基础，科学出版社，1987年2月第一版
[79] 系统安全性工程手册，中华人民共和国军用标准，GJB/Z99-97，国防工业出版社，1998
[80] 周经伦等．计算机辅助安全性分析，计算机应用研究，1997年，第6期，22-24
[81] 曾天翔 主编，杨先振，王维翰 副主编，可靠性及维修性工程手册(上册)，国防工业出版社，1994年9月
[82] System Safety Analysis Handbook. System Safety Society, U.S.A. July 1993
[83] 张忠任等，驾驭经营风险之道，北京：经济管理出版社，1996
[84] Gong Shiyu, Yah Zhaolin, Zhou Jinglun, System Safety Analysis Based on Accident Mechanism, 2000 International Symposium on Safety and Technology, Beijing
[85] P. M. Merlin & D. J. Farber, Recoverability of Communication Protocols-Implications of a Theoretical Study, IEEE Trans. Commun., Vol. Com-24, 1976, 1036-1043
[86] P. Azema & M. Diaz, Checking Experiments for Concurrent Systems, Proc. FTCS-7, June 1977, 206
[87] Jeffrey J. E Tsai, Steve Jennhwa Yang, Yao-Hsiung Chang, Timing Constraint Petri Nets and Their Application to the Schedulability Analysis of Real-Time 2002123077.113.tif
[88]Gianfranco Ciardo, A Characterization of the Stochastic Process Underlying a stochastic Petri Net, IEEE Transactions on Software Engineering, Vol. 20, No.7, 1994, 506-515
[89] Peter W. Glynn, A GSMP Formalism for Discrete Event Systems, Proceedings of the IEEE, Vol.77, No.1, Jan. 1989, 14-23
[90]B. Plateau & K. Atif, Stochastic Automata Network for Modeling Parallel Systems, IEEE Trans. Software Eng., Vol. 17, No.10, Oct. 1991, 1093-1108
[91]W. J. Stewart, Introduction to the Numerical Solution of Markov Chain, Princeton Univ. Press, 1994
[92]P. Kemper, Numerical Analysis of Superposed GSPNs, Proc. Sixth Int'l Workshop Petri Nets and Performance Models, 52-61, Durham, N.C., Oct. 1995
[93]P. Kemper, Numerical Analysis of Superposed GSPNs, IEEE Trans. Software Eng., Vol. 22, No.9, 615-628, Sept. 1996
[94]G. Ciardo & M. Tilgner, On the Use of Kronecker Operators for the Solution of Generalized Stochastic Petri Nets, ICASE Report #96-35 CR-198336, NASA Langley Research Center, May 1996
[95]李庆扬，王能超，易大义，数值分析，华中理工大学出版社，1986年第三版
[96]金光，高可靠度仿真基本原理与方法，国防科技大学硕士论文，1997年4月
[97]徐钟济，蒙特卡罗方法，上海科学技术出版社，1985年6月
[98]A. Sharif Heger, Billy V. Koen, Hanspeter E Wegmann, Parallel Processing of Fault Trees on a Locally Distributed Multiple-Processor Network, IEEE Trans. Rel., 1993, 42(3): 436～441
[99]Bruno R. Preiss, Wayne M. Loucks, V. Carl Hamacher, A Unified Modeling Methodology for Performance Evaluation of Distributed Discrete Event Simulation Mechanisms, 1988 Winter Simu. Conf., 315～324
[100]Albert H. Moore, H. Leon Harter, Robert C. Snead, Comparison of Monte Carlo Techniques for Obtaining System-Reliability Confidence Limits, IEEE Trans. Rel., 1980, R-29(4): 327～331
[101] Manuel Villn-Altamiranno, Jos Vill n-Altamirano, RESTART: A Straightforward Method for Fast Simulation of Rare Events. Proceed, 1994 Winter Simu. Conf., 282～289
[102] Roy Billinton, Anuapoorani Sankarakrishan, A System State Transition Sampling Technique for Reliability Evaluation, Rel. Eng. Sys. Saf., 1994, 44: 131～134
[103] Acclo M. De O. Porta Nova, James R. Wilson, Using Control Variables to Estimate Multresponse Simulation Metamodels, Proc. 1986 Winter Simu. Conf., 326～334
[104] R. Cranley, T. N. Patterson, Randomization of Number Theoretic Methods for Multiple Integration, SIAM J. Numer. Anal., 1976, 13(6): 904～914
[105] Jerome Spanier, Eral H. Maize, Quasi-Random Methods for Estimating Integrals Using Relatively Small Samples, SIAM Review, 1994, 36(1): 18～44
[106] Marvin K. Nakayama, General Conditions for Bounded Relative Error in Simulations of Highly Reliable Markovian Systems, Adv. Appl. Prob., 1996, 28: 687～727
[107] Hiromitsu Kumamoto, Kazuo Tanaka, Koichi Inoue, Ernest J. Henley, Dagger-Sampling Monte carlo for System, Unavailability Evaluation, IEEE Trans. Rel., 1980, R-29(2): 122～125
[108] George S. Fishman, A Comparison of Four Monte Carlo Methods for Estimating the Probability of s-t Connectedness, IEEE Trans. Rel., 1986, R-35(2): 145～154
[109] 欧·亨利等著，吕应中等译，可靠性工程与风险分析，原子能出版社，1988年2月
[110] Darush Davani, Parameteric What-If Analysis in MTTF: A Single-Run Monte-Carlo Based Approach, Microelectran Rel., 1994: 34(2): 275～281
[111] G.C. Oliveira, M. V. F. Pereira, S.H.F. Cunha, A Technique for Reducing Computational Effort in Monte-Carlo Based Composite Reliability Evaluation, IEEE Trans. Power Sys., 1989, 4(4): 1309～1315
[112] I.M. Sobol, On Quasi-Monte Carlo Intergrations, Math. Comp. Simu. Math. Comp. Simu., 1998, 47: 103～1112
[113] Robert Geist, Extended Behavioral Decomposition for Estimating Ultrahigh Reliability, IEEE Trans. Rel., 1991, 40(1): 22～27
[114] A. C. M Hpomans, J. P. C. Kleijnen, Importance Sampling in Systems Simulation, A Pratical Failure? Math. Comp. Simu., 1979, ⅩⅪ 209～220
[115] P. Ney, E. Nummelin, Markov Additive Processes Ⅱ. Large Deviations, Annals Prob., 1987, 15(2): 593～609
[116] Peter Nex, Dominating Points and the Asymptotics of Large Deviations for Random Walk on R~d, Annals Prob., 1983, 11(1): 158～167
[117] Marie Cottrell, Jean-Claude Fort, Gerard Malgouyres, Large Deviations and Rare Events in the Study of Stochastic Algorithms, IEEE Trans. Auto. Contr., 1983, AC-28(9): 907～920
[118] James A Bucklew, Peter Ney, John S. Sadowsky, Monte Carlo Simulation and Large Deviations Theory for Uniformly Recurrent Markov Chains, J. Appl. Prob., 1990, 27: 44～59
[119] T. Lehtonen, H. Nyrhinen, Simulating Level-Crossing Probabilities by Importance Sampling, Adv. Appl. Prob., 1992, 24: 858～874
[120] Peter W. Glynn, Some Topics in Regenerative Steady-State Simulation, Acta Appl. Math., 1994, 34: 225～236
[121] Ambuj Goyal, Perwez Shahabuddin, Philip Heidelberger, Victor F. Nicola, Peter W. Glynn, A Unified Framework for Simulating Markovian Models of Highly Dependable Systems, IEEE Trans. Comp., 1992, 41(1): 36～51
[122] Peter W. Glynn, Donald Iglehart, Importance Sampling for Stochastic Simulations, Management Sci., 1989, 35(11): 1367～1392
[123] Peter L. Goddard, A Combined Analysis Approach to Assessing Requirements for Safety Critical Real-Timed Control Systems, 1996 Proceedings Annual Reliability and Maintainbility Symposium, 110-115
[124] 林闯，张彤，一种生成具有变量标识的高级Petri网可达树的算法，计算机学报，1991年8月，第8期，596-604
[125] Ernst W. Mayr, An Algorithm for the General Petri Net Reachability Problem, SIAM J. Comput.vol. 13, No. 3, Aug. 1984, 441-460
[126] Gianfranco Ciardo & Andrew S. Miner, Storage Alternatives for Large Structured State Spaces
[127] D.E. Knuth, Sorting and Searching, Addison-Wesley, Reading, MA, 1973
[128] G. Chiola, Compiling Techniques for the Analysis of Stochastic Petri Nets, Proc. 4~(th) Int. Conf. On Modeling Techniques and Tools for Performance Evaluation, 1989, 13-27
[129] 林闯，随机Petri网模型的精化设计，软件学报，2000．11(1)，104-109
[130] 国防科工委军用标准化中心，“故障模式、影响及危害性分析程序”“故障树分析”实施指南，1994
[131] 颜兆林，系统安全性分析技术研究，国防科技大学博士论文，2001年5月
© 2004-2018 中国地质图书馆版权所有 京ICP备05064691号 京公网安备11010802017129号 地址：北京市海淀区学院路29号 邮编：100083 电话：办公室：(+86 10)66554848；文献借阅、咨询服务、科技查新：66554700 |