2026-09-19T11:42:29Zhttps://dspace.mit.edu/server/oai/request

oai:dspace.mit.edu:1721.1/764912026-06-06T01:05:07Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023

Nancy Leveson. Dong, Airong, S.M. Massachusetts Institute of Technology Massachusetts Institute of Technology. Engineering Systems Division. System Design and Management Program. Massachusetts Institute of Technology. Engineering Systems Division a-cc--- 2013-01-23T19:43:54Z 2013-01-23T19:43:54Z 2012 2012 http://hdl.handle.net/1721.1/76491 822586748 Thesis (S.M. in Engineering and Management)--Massachusetts Institute of Technology, Engineering Systems Division, System Design and Management Program, 2012. Cataloged from PDF version of thesis. Includes bibliographical references (p. 83-84). The accident analysis method called STAMP (System-Theoretic Accident Model), developed by Prof. Nancy Leveson from MIT, was used here to re-analyze a High Speed Train accident in China. On July 23rd, 2011, 40 people were killed and 120 injured on the Yong-Wen High Speed Line. The purpose of this new analysis was to apply the broader view suggested by STAMP, considering the whole socio-technological system and not only equipment failures and operators mistakes, in order to come up with new findings, conclusions and recommendations for the High Speed Train System in China. The STAMP analysis revealed that the existing safety culture in the whole train organization, the Ministry of Railway and all its sub organizations in both the Train Development and Train Operation channels, do not meet the safety challenges involved in a high risk system like this- running frequent trains on the same line at 250km/h, with hundreds of passenger on board. The safety hazards were not systematically analyzed (not at the top level nor at the design level), safety constraints and safety requirements were very vaguely phrased, and no real enforcement was applied on safe design and implementation nor on safe operation. It looks like no clear policy on the performance/safety dilemma existed, nor the necessary safety education and training. Following from the STAMP analysis, one of the major recommendations in this thesis is to create a professional Train Safety Authority at the highest level, to be in charge of creating and supervising the rules for both Engineering and Operations, those two being highly interrelated with respect to safety. Specific Control Structures are recommended too, along with some detailed technical recommendations regarding the fail-safe design of the equipment involved in the accident. Another major recommendation is to design the safety critical systems, like the signaling control system using STPA ((System Theoretic Process Analysis), a hazard analysis technique. In the second part of this thesis, STPA is applied to another signaling system-Communication Based Train Control (CBTC) system-which is similar to the one presented in the first part. The primary goal of STPA is to include the new causal factors identified in STAMP that are not handled by the older techniques. It aims to identify accident scenarios that encompass the entire accident process, including design errors, social, organizational, and management factors contributing to accidents. These are demonstrated in the STPA analysis section. by Airong Dong. S.M. in Engineering and Management 84 p. eng Massachusetts Institute of Technology M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission. http://dspace.mit.edu/handle/1721.1/7582 System Design and Management Program. Engineering Systems Division. Application of CAST and STPA to railroad safety in China Application of Causal Analysis based on STAMP and System Theoretic Process Analysis to railroad safety in China Application of Causal Analysis based on System-Theoretic Accident Model and System Theoretic Process Analysis to railroad safety in China Thesis application/pdf false Publication unknown unknown <Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="9f6db16c-2e32-46bf-88bd-0973571d698c"> <Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type> <Language>eng</Language> <Title>Application of CAST and STPA to railroad safety in China</Title> <Subtitle>Application of Causal Analysis based on STAMP and System Theoretic Process Analysis to railroad safety in China</Subtitle> <Subtitle>Application of Causal Analysis based on System-Theoretic Accident Model and System Theoretic Process Analysis to railroad safety in China</Subtitle> <PublishedIn> <Publication> </Publication> </PublishedIn> <PublicationDate>2012</PublicationDate> <Authors> <Author> <DisplayName>Dong, Airong, S.M. Massachusetts Institute of Technology</DisplayName> <Affiliation> <OrgUnit> </OrgUnit> </Affiliation> </Author> </Authors> <Editors> </Editors> <Publishers> <Publisher> <DisplayName>Massachusetts Institute of Technology</DisplayName> <OrgUnit /> </Publisher> </Publishers> <License>http://dspace.mit.edu/handle/1721.1/7582</License> <Keyword>System Design and Management Program.</Keyword> <Keyword>Engineering Systems Division.</Keyword> <Abstract>The accident analysis method called STAMP (System-Theoretic Accident Model), developed by Prof. Nancy Leveson from MIT, was used here to re-analyze a High Speed Train accident in China. On July 23rd, 2011, 40 people were killed and 120 injured on the Yong-Wen High Speed Line. The purpose of this new analysis was to apply the broader view suggested by STAMP, considering the whole socio-technological system and not only equipment failures and operators mistakes, in order to come up with new findings, conclusions and recommendations for the High Speed Train System in China. The STAMP analysis revealed that the existing safety culture in the whole train organization, the Ministry of Railway and all its sub organizations in both the Train Development and Train Operation channels, do not meet the safety challenges involved in a high risk system like this- running frequent trains on the same line at 250km/h, with hundreds of passenger on board. The safety hazards were not systematically analyzed (not at the top level nor at the design level), safety constraints and safety requirements were very vaguely phrased, and no real enforcement was applied on safe design and implementation nor on safe operation. It looks like no clear policy on the performance/safety dilemma existed, nor the necessary safety education and training. Following from the STAMP analysis, one of the major recommendations in this thesis is to create a professional Train Safety Authority at the highest level, to be in charge of creating and supervising the rules for both Engineering and Operations, those two being highly interrelated with respect to safety. Specific Control Structures are recommended too, along with some detailed technical recommendations regarding the fail-safe design of the equipment involved in the accident. Another major recommendation is to design the safety critical systems, like the signaling control system using STPA ((System Theoretic Process Analysis), a hazard analysis technique. In the second part of this thesis, STPA is applied to another signaling system-Communication Based Train Control (CBTC) system-which is similar to the one presented in the first part. The primary goal of STPA is to include the new causal factors identified in STAMP that are not handled by the older techniques. It aims to identify accident scenarios that encompass the entire accident process, including design errors, social, organizational, and management factors contributing to accidents. These are demonstrated in the STPA analysis section.</Abstract> <Access xmlns="http://purl.org/coar/access_right" > </Access> </Publication>