Conclusion

Safe operation of control systems — Principles and methods

Figure 1 - Hasse diagram

Figure 2 - Hasse
diagram of a monotonic function

Figure 3 - Hasse diagram of a non-coherent system

Figure 4 - Component
associations

Figure 5 - Example of a cause tree

Figure 6 - Status graph

Figure 7 - Markov
graph

Figure 8 - Stochastic RdP of the client-server system,
with 2 servers and 3 clients

Figure 9 - Stochastic Petri net of the resource entity
system

Figure 10 - A single repairer
with priority repair on first breakdown

Figure 11 - Marker graph homogeneous to a Markov
graph

Figure 12 - Generalized stochastic
RdP

Figure 13 - Construction primitives for RoP

Figure 14 - Constructing an RdP using primitives

Figure 15 - Failure modeling

Figure 16 - Interpreted and stochastic Petri net

Figure 17 - Appearance
of an aggregated Markov graph

Figure 18 - ECU-based control

Figure 19 - Sensor failure tolerance

Figure 20 - Functional and dysfunctional model of
the control system

Figure 21 - Aggregate Markov
graph of the model in figure 20

Figure 22 - Reliability
of all four models