The aerospace industry has been investigating integrated modular systems (IMS) for some years. These systems offer benefits in terms of flexibility, software/hardware abstraction, and incremental upgrades. However, in order to benefit from the technology a safety case must be generated which can be maintained incrementally with system changes, otherwise certification will be prohibitively expensive. This paper investigates the different types of upgrade that an IMS may be subject to. A method is proposed for determining the impact of a proposed upgrade. Finally, a baseline safety case for IMS in which evidence can be separated between different stakeholders in the system is presented. This separation facilitates incremental certification by allowing the impact of a change on the baseline safety case to be minimised.

BibTex Entry

@inproceedings{Nicholson2000,
 author = {M. Nicholson and P. Conmy and I. Bate and J. McDermid},
 booktitle = {5th Australian Workshop on Safety Critical Systems and Software},
 category = {design},
 month = {Nov},
 pages = {31-41},
 title = {Generating and maintaining a Safety Argument for Integrated Modular Systems},
 year = {2000}
}