2026-09-19T12:06:05Zhttps://dspace.mit.edu/server/oai/request

oai:dspace.mit.edu:1721.1/1241722026-06-17T14:44:57Zcom_1721.1_7582com_1721.1_7581col_1721.1_131022

Nancy G. Leveson. Silva Castilho, Diogo. Massachusetts Institute of Technology. Department of Aeronautics and Astronautics. Massachusetts Institute of Technology. Department of Aeronautics and Astronautics 2020-03-23T18:09:42Z 2020-03-23T18:09:42Z 2019 2019 https://hdl.handle.net/1721.1/124172 1143739911 Thesis: Ph. D., Massachusetts Institute of Technology, Department of Aeronautics and Astronautics, 2019 Cataloged from PDF version of thesis. Includes bibliographical references (pages 135-137). This dissertation describes a new approach to integrate a hazard analysis into Safety Management Systems (SMS). This new engineering process guides safety managers and analysts in the identification of a migration toward states of higher risk. The solution is the use of an active version of STPA (Systems-Theoretic Process Analysis), a hazard analysis tool based on Systems-Theoretic Accident Model and Processes (STAMP). The Active STPA uses data collected during operations, such as Flight Data Monitoring events and voluntary reporting, to identify leading indicators of increasing risk. The events are compared with the STPA. The discrepancies lead to a reasoning about previous assumptions on human behavior and the environment in which the system operates. New defenses are identified and implemented. The output of the process is a set of new defenses for prevention and mitigation that will enforce the requirements and constraints generated by the STPA, allowing the generation of cumulative knowledge on system behavior over time. The feedback on SMS activities allows targeted safety improvement activities and provides qualitative information for hazard management integrating Active STPA into an SMS. Most of the indicators currently in use in the aviation industry are reactive because they measure only parameter exceedances. Active STPA allows a proactive identification of the potential cause of future accidents. by Diogo Silva Castilho. Ph.D. Ph.D. Massachusetts Institute of Technology, Department of Aeronautics and Astronautics vii, 184 pages eng Massachusetts Institute of Technology MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission. http://dspace.mit.edu/handle/1721.1/7582 Aeronautics and Astronautics. Active STPA : integration of hazard analysis into a Safety Management System Framework Active Systems-Theoretic Process Analysis Integration of hazard analysis into a Safety Management System Framework Thesis application/pdf 2020-03-23T18:09:42Z Publication Doctoral Aero unknown unknown <Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="9c54024f-02c2-4fc9-a17a-9f5a33070c4b"> <Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type> <Language>eng</Language> <Title>Active STPA : integration of hazard analysis into a Safety Management System Framework</Title> <Subtitle>Active Systems-Theoretic Process Analysis</Subtitle> <Subtitle>Integration of hazard analysis into a Safety Management System Framework</Subtitle> <PublishedIn> <Publication> </Publication> </PublishedIn> <PublicationDate>2019</PublicationDate> <Authors> <Author> <DisplayName>Silva Castilho, Diogo.</DisplayName> <Affiliation> <OrgUnit> </OrgUnit> </Affiliation> </Author> </Authors> <Editors> </Editors> <Publishers> <Publisher> <DisplayName>Massachusetts Institute of Technology</DisplayName> <OrgUnit /> </Publisher> </Publishers> <License>http://dspace.mit.edu/handle/1721.1/7582</License> <Keyword>Aeronautics and Astronautics.</Keyword> <Abstract>This dissertation describes a new approach to integrate a hazard analysis into Safety Management Systems (SMS). This new engineering process guides safety managers and analysts in the identification of a migration toward states of higher risk. The solution is the use of an active version of STPA (Systems-Theoretic Process Analysis), a hazard analysis tool based on Systems-Theoretic Accident Model and Processes (STAMP). The Active STPA uses data collected during operations, such as Flight Data Monitoring events and voluntary reporting, to identify leading indicators of increasing risk. The events are compared with the STPA. The discrepancies lead to a reasoning about previous assumptions on human behavior and the environment in which the system operates. New defenses are identified and implemented. The output of the process is a set of new defenses for prevention and mitigation that will enforce the requirements and constraints generated by the STPA, allowing the generation of cumulative knowledge on system behavior over time. The feedback on SMS activities allows targeted safety improvement activities and provides qualitative information for hazard management integrating Active STPA into an SMS. Most of the indicators currently in use in the aviation industry are reactive because they measure only parameter exceedances. Active STPA allows a proactive identification of the potential cause of future accidents.</Abstract> <Access xmlns="http://purl.org/coar/access_right" > </Access> </Publication>