A modular risk concept for complex systems

TL;DR

This paper proposes a modular risk assessment framework for complex systems using assurance contracts and contract-based design to enforce constraints at various system levels, aiming for effective risk mitigation.

Contribution

It introduces the novel use of contract-based design contracts as risk constraints within a modular risk assessment approach for complex systems.

Findings

Combines existing methodologies for modular risk assessment.

Uses assurance contracts to express risk constraints.

Aims to facilitate industry and academic feedback.

Abstract

This paper motivates the views that for complex systems, risk should be controlled by enforcing constraints in a modular way at different system levels, that the constraints can be expressed as assurance contracts and that acceptable risk mitigation can be demonstrated in assurance case modules. This short paper explains how already existing methodologies can be combined to create a concept for modular risk assessment. The main novelty is the use of so-called contract-based design (CBD) contracts and refinements as risk constraints. This idea is presented here with the objective of receiving feedback from industry and academia.