Browse Topic: Risk assessments

Items (478)
Traditional methods for assessing bridge resilience often focus on single hazards or static conditions. Yet bridges today face more complex multi-hazard threats. To address this, this research develops a dynamic model to evaluate bridge resilience under multi-hazard conditions, which is intended to provide scientific support for decision-making to improve resilience. The study first establishes an index system that measures a bridge’s ability to absorb impacts, adapt during an event, and recover afterward. We also propose a method to calculate the coupling degree, which quantifies the amplification effect of multiple hazards, such as an earthquake followed by a flood, on each other’s impacts. Next, we clarify the interrelationships among key resilience factors. Using this understanding, we construct a system dynamics model that simulates the variation of bridge resilience over a full disaster cycle. Finally, a numerical simulation is carried out for a concrete continuous girder bridge in China’s coastal areas as a case study. The results confirm the model is valid and clearly show the differences in bridge resilience between single-hazard and multi-hazard events. More importantly, they prove that combined hazards make the bridge system much more vulnerable. The model also identifies the best strategies for intervention: a strategy that coordinates actions across all disaster phases performs best, as it most effectively reduces the impact of compound hazards and keeps the resilience curve smoother. In short, this study presents a new method for assessing bridge resilience and provides engineers and managers with a practical tool to identify structural weaknesses and optimize resource allocation for resilience improvement.
Lin, JiachenChai, Liang
This document contains information and guidance on assessment of the risk posed by observed tin whiskers for aerospace, defense, and high-performance (ADHP) products or other products that demand high reliability.
G-24 Pb-free Risk Management Committee for ADHP
Aiming at the problem of insufficient modeling of spatio-temporal heterogeneity in road traffic accident prediction, a dual task machine learning framework integrating geographical environment, location attributes and time periodicity is proposed. The dataset used in this study was derived from traffic accident records of Nanchang during 2019–2023. Firstly, geographical identifiers are generated by rounding and aggregating latitude and longitude coordinates. At the same time, the location type is processed by a one-hot encoding, so as to carry out spatial clustering analysis of accident hotspots. Compared with the North-South pattern, the contribution of geographical features shows a strong East-West trend. The kernel density heatmap identified Zone A and zone B as dual core high-risk areas. Secondly, the sinusoidal/cosine function is used to encode the time feature circularly, which effectively captures the daily change of the accident. The quantitative analysis of random forest regression model showed that time characteristics accounted for 89.2% of the variance of accident frequency interpretation, significantly exceeding the contribution of geographical factors (10.2%) and location attributes (0.6%). After hyperparameter optimization, the accuracy of XGBoost classifier in predicting serious accidents is 75.97%, and the AUC value is 0.8412, which has strong robustness, and provides reliable support for dynamic risk assessment of traffic management system.
Luo, JiangZhang, YuxinLi, XinWu, Ronghai
The two-way ten-lane expressway has the significant characteristics of “large traffic volume, mixed vehicle types, and heavy loads”, which makes the impact of traffic flow status on accident risk present nonlinear characteristics. Traffic flow fluctuations not only directly affect the probability of accidents, but also amplify the spatiotemporal differences in rescue needs through mechanisms such as lane occupancy time and accident chain reactions. Therefore, the essence of resource allocation on a two-way ten-lane expressway is the “spatiotemporal matching problem between dynamic risks and limited resources”, which requires both quantifying the spatiotemporal evolution of risks and coping with the high uncertainty of the traffic system. Aiming at the problem of inefficiency of traditional empirical resource allocation under complex traffic conditions, this study proposes a dynamic optimization framework based on multidimensional risk assessment for emergency rescue resource allocation. In this framework, firstly, the entropy weight method and fuzzy comprehensive evaluation are combined to construct a risk quantification model using historical accident data and real-time traffic characteristics to achieve fine risk classification of road sections. Secondly, a multi-objective optimization model is established with the goal of minimizing risk-weighted costs and maximizing risk-weighted resource demand satisfaction, and considering constraints such as mandatory requirements for key equipment in high-risk areas and minimum site configuration. At the same time, the improved NSGA-II algorithm is used to effectively solve the contradiction between cost and utilization efficiency in emergency rescue resource allocation through adaptive non-dominated sorting, hybrid genetic operators and dynamic penalty mechanism. Experimental results show that the improved NSGA-II algorithm is superior to the traditional method in terms of Pareto front distribution, convergence speed and actual resource allocation effect. Compared with the traditional scheme, the method proposed in this study reduces the resource allocation cost by 35.5%, increases the risk-weighted resource demand satisfaction rate by 1.9%, and expands the resource coverage of high-risk areas by 13.8%. This study provides scientific decision-making support for emergency response in complex road networks and offers a practical optimization approach for highly dynamic traffic emergencies.
Kan, YoujunCao, YangShi, XiaominGao, Shangjie
To investigate the disaster evolution characteristics and associated risks of heavy rainfall and flooding on urban transportation infrastructure, this study takes the extreme rainstorm event in Zhengzhou as a typical case. A multidimensional dynamic risk assessment model is employed to analyze the disaster evolution process and conduct risk evaluation. First, the three-stage evolution process and its characteristics are systematically examined. Then, based on the theory of natural disaster risk elements, a dynamic risk assessment model is constructed. The improved Order of Priority Approach (OPA) is used to determine the weights of multidimensional risk factors, and interval type-1 fuzzy logic is introduced to address the uncertainty of fuzzy indicators. Finally, the overall risk level of the heavy rainfall–flooding disaster chain is calculated and evaluated. The results indicate a high-risk level, which is consistent with the findings of the field investigation report, thereby validating the feasibility of the proposed disaster chain evaluation method combining multiple models. This analysis provides a theoretical basis for future studies on similar urban storm flood risk scenarios.
Zhang, YongchengWang, JianweiWu, ZiyiWang, YanLuo, QingKang, Pingping
Ultrasonic sensors are widely deployed in automotive driver assistance systems for near-range environment perception and provide safety-relevant inputs for functions such as parking assistance and automated parking. With increasing vehicle automation, the integrity and availability of ultrasonic sensor data become more critical, as compromised measurements may lead to incorrect vehicle decisions and hazardous behavior. While prior research has extensively studied physical attacks on ultrasonic sensors, a structured cybersecurity risk analysis in accordance with automotive cybersecurity standards, combined with experimental validation, is largely missing. In particular, the communication interface between ultrasonic sensors and control units has received limited attention despite its relevance as a potential attack surface. This paper presents a systematic security analysis of an automotive ultrasonic sensing system based on a demonstrator setup. The work applies a Threat Analysis and Risk Assessment methodology aligned with ISO/SAE 21434 and HEAVENS 2.0 to identify security-relevant assets, threat scenarios, and attack paths. Risk levels are derived by evaluating potential impact and attack feasibility. To validate the risk assessment, a structured test strategy is developed using the ISTQB test process and translated into laboratory experiments. Both digital attacks targeting the sensor communication interface, with DSI3 selected as the representative protocol, and physical manipulations of the sensor environment are examined. Experimental results show that selected communication-level attacks can be realized with moderate effort and can cause controlled falsification or loss of measurement data. Physical environmental manipulations significantly degrade signal quality but do not fully suppress object detection in the evaluated configuration. The findings largely confirm the initial risk assessment while enabling refinement of attack feasibility parameters. The results provide a validated linkage between automotive cyber-security risk assessment methods and practical testing of ultrasonic sensing systems and underline the importance of jointly addressing communication interfaces and physical effects in future security concept development.
Gahm, SebastianHaller, JonathanKriesten, Reiner
This paper investigates the integration of Artificial Intelligence (AI) within radar-based perception for Advanced Driver Assistance Systems (ADAS) under safety considerations aligned with ISO 26262 [1] for functional safety and ISO 21448 (SOTIF) [2] for performance-related safety of the intended functionality. The study evaluates a hybrid architecture in which AI-based perception modules are combined with deterministic supervisory mechanisms to maintain safety compliance. A simulation-based case study using CARLA with radar sensor modeling is presented to compare a deterministic radar perception pipeline with an AI-enhanced approach under nominal and degraded environmental conditions. Performance is evaluated using precision, recall, and F1 score metrics. Results indicate improved recall and F1 score under adverse scenarios for the AI-based perception module, accompanied by a moderate increase in false positives. The paper discusses architectural constraints required to limit non-deterministic behavior, including confidence gating, deterministic supervision, and scenario-based validation. The findings are limited to simulation and are intended to provide preliminary insights into the technical and safety implications of incorporating AI-based radar perception within ISO 26262-compliant ADAS architectures.
Jain, Yesha
Noise pollution is a major environmental and health challenge, yet its strong spatial and temporal variability makes comprehensive mapping highly complex. Current approaches under the European Noise Directive (END) provide only partial coverage and often lack temporal dynamics. The NoiseSphere project, funded by the Austrian Research Promotion Agency FFG, develops an AI-based methodology for dynamic, large-scale noise prediction and mapping. A machine learning model is trained on heterogeneous data sources, including semantically enriched open Sentinel-2 satellite imagery, OpenStreetMap road data and existing noise maps. The model is refined through integration of noise emission data and validated using targeted in-situ measurements. A case study in an urban environment (Graz, Austria) demonstrates the model’s applicability. By combining remote sensing, traffic dynamics, and machine learning, NoiseSphere enables predictive noise mapping even in regions not covered by current legislation. This approach provides a scalable tool for evidence-based environmental planning, health risk assessment, and policy support.
Girstmair, Josef
Noise phenomena in automobiles caused by the stick-slip effect are increasingly among the most frequent reasons for customer complaints and therefore represent a critical vehicle quality attribute. To proactively address such issues, stick-slip testing of contacting material pairs is commonly applied during development. However, the predictive capability of current stick-slip test methods remains limited, particularly when highly flexible materials and realistic, stochastic excitation conditions are involved. The flexibility of sealing systems often allows the actual relative motion at the contact interface to be accommodated through adhesion and elastic deformation, thereby delaying or even preventing sliding. To date, this effect has not been represented by any characteristic parameter in conventional stick-slip testing. Instead, existing evaluations focus exclusively on the analysis of occurring stick-slip oscillations. For the initiation of stick-slip phenomena, however, not only the mean displacement between two stick-slip oscillations during the sliding phase is relevant, but also the relative displacement required to initiate the first slip event of the sealing contact. With the algorithm developed in this work, which reproducibly determines the distance to first slip based on changes in the friction force slope, this methodological gap is now closed. The displacement to first slip depends on numerous influencing factors, including profile geometry, normal load, sliding velocity, excitation profile, and environmental conditions, and was previously inaccessible by both experimental and numerical approaches. In particular, the onset of slip in sealing contacts can now be determined under stochastic excitation of the friction pairing, thereby closely reflecting real operating conditions. As a result, the prevention of noise phenomena can be significantly strengthened at an early stage of vehicle development.
Strangfeld, MartinFritz, SusanneWeber, JensRosell, Anneli
The intent of this standard is to establish a framework to assure that all evaporators conforming to its requirements demonstrate an acceptable health and safety environment for vehicle occupants as determined from the completed risk assessment. R-744 and low pressure (i.e., non-transcritical refrigerants with a critical temperature between 85 and 120 °C) mobile air conditioning (MAC) refrigerant evaporators shall meet the testing and labeling requirements of this standard. SAE J639 contains a list of all refrigerants considered acceptable for use in mobile thermal systems for which this standard applies when the refrigerant is used in a direct expansion architecture. SAE J639 also requires an assessment to be performed to minimize reasonable risks in MAC systems. The evaporator (as designed and manufactured) shall be part of that risk assessment, and it is the responsibility of the vehicle manufacturer to ensure all relevant aspects of the evaporator are included. It is the responsibility of all vehicle or evaporator manufacturers to comply with the standards of this document at a minimum. (Substitution of specific test procedures by vehicle manufacturers that correlate well to field return data is acceptable.) As appropriate, this standard can be used as a guide to support risk assessments. With regard to certification, most vehicle manufacturers have established formal production part approval processes (PPAP) where compliance certification is established and formally documented. For an evaporator manufacturer of non-original equipment parts (or a vehicle manufacturer that does not have a formal part compliance certification process), then the certification described in this standard is the requirement to which those evaporators shall comply. In this case, the evaporator manufacturer or an independent institution shall complete the evaporator certification according to SAE J2911. An example of the latter would be the completion of witness testing by the evaporator manufacturer with the submission of certification documents by the witness organization. This standard originated for the introduction of R-1234yf. The content is based upon the associated 2011 Risk Assessment with input from five OEM evaporator manufacturers. R-744 was included as its requirements were understood in 2011. Refrigerant R-152a was excluded from this standard because a single secondary loop refrigerant system is required. This standard also does not apply to R-134a refrigerant evaporators because it is proven in use.
ICTMS Supplier Committee
Occupant protection has been at the forefront of risk evaluation regarding vehicle crashworthiness design. However, the vehicle is a member of a larger transportation system with varied stakeholders. This article identifies an opportunity for assessing risk in a crash event through emerging safety science paradigms. Conventional Safety I and Safety II frameworks handle well-defined hazards but falter with uncertainty, variability, and emergent behaviors in real crashes. A comprehensive literature review was performed on peer-reviewed research to situate automotive crash safety risk within the Safety III paradigms. The review addresses two questions: (1) How is “risk” defined across the crash safety literature and adjacent safety science domains? and (2) What limitations arise from these definitions in practice? Findings show a dominant probabilistic framing alongside a minority of system-oriented interpretations. Current crash safety practice lacks a coherent, system-level definition of risk that integrates uncertainty and knowledge strength, leading to fragmented methods and limited alignment with modern safety science. Based on this synthesis, the article proposes guiding principles for Safety III-aligned guidelines and recommendations that integrate consequences, uncertainty, and knowledge strength to improve transparency, traceability, and adaptability in crash safety decision-making.
Rye, Patrick J.
Modern avionics programs contend with escalating complexity driven by concurrent safety certification, cybersecurity compliance, and multi-standard regulatory demands. Traditional program management approaches treat risk management as a parallel support function rather than a central governance mechanism, resulting in reactive responses that fail to prevent cost and schedule erosion. This paper introduces the Risk-Driven Program Management Framework (RD-PMF), an eight-phase governance model that embeds quantitative risk assessment, standards-risk mapping across DO-178C, DO-326A, ARP4754A, and ARP4761A, real-time digital dashboards, and earned value management within core program decision-making. The framework integrates probabilistic schedule analysis using Monte Carlo simulation with continuous risk exposure monitoring to enable proactive, data-driven governance. RD-PMF is demonstrated through a representative avionics program scenario modelled on a flight control system development effort with a 24-month baseline schedule, $15 million budget, and 27 identified risks. Simulation parameters, informed by the authors’ professional experience in avionics program management and published industry benchmarks, illustrate framework applicability within industry-typical ranges. Five targeted risk mitigation strategies, with a combined investment of $1.27 million addressing certification review delays, requirements volatility, supplier delays, hardware-software integration, and cybersecurity threats, reduced aggregate risk exposure by 77 percent (64.7 to 15.1 schedule-weeks). The demonstration yields an 11 percent schedule performance index improvement (SPI: 0.88 to 0.98), a 6.5 percent cost performance index improvement (CPI: 0.92 to 0.98), schedule variance reduction from 8.0 to 1.2 weeks, and a 2.5-month acceleration in projected completion. Return on investment analysis shows 2.22x gross (1.22x net) on mitigation spending, with total quantified benefits of $2.82 million. These results illustrate a measurable shift from reactive program control to proactive, risk-informed governance suited to next-generation aerospace development programs.
Rahul, SaurabhBenikireddy, Raghunatha
In the field of Aerospace, which has a long Life-Cycle process [20-30Years], Component Obsolescence has become a major problem as it prevents Maintenance & sustenance of a product with committed life-cycle period. Obsolescence Management plays a vital role by deriving strategic plans on proactive obsolescence where the system needs to be supported for several decades. This abstract analyzes the obsolescence challenges in the Aviation industry especially in Avionics System impacted by component obsolescence and present the possible proactive obsolescence management in terms of Engineering, Technology, and business/cost elements. The Obsolescence problem cannot be avoided but the impact of obsolescence and mitigate the risk can be minimized by planning and managing response. The obsolescence risk assessment for the Bill Of Materials (BOM) is a paramount activity to manage obsolescence proactively and cost-effectively. Digital Transformation of analyzing the component obsolescence status and integrated with statistical model to predict the End of Life (EOL) of sub-system/System. The EOL predictions would aid Obsolescence management plan, with mitigation strategies including Form-Fit-Function (FFF) replacements, component life extension through refurbishment, Lead-Free Control plan, component counterfeit and collaborative frameworks for modular, open-standard designs. This approach aimed at reducing unplanned costs by up to 40% on DMSMS (Diminishing Manufacturing Sources and Material Shortages) Management Plan, aligning with IEC 62402 (International standard for obsolescence management) and ARINC 662-1 (Guidelines for obsolescence management in commercial aircraft).
Dharmananyala, RohithMunirathnam, KrishnaMarokeyfrancis, JoisyjoseSadashivaiah, NageshKondamari, Harshitha
Air Traffic Management (ATM) must be familiar with the exact Aircraft Take-off Weights (ATOWs) of airplanes to make the most use of runways, maintain safety margins high, and keep utilization and resources in balance. This paper aims to present a dependable ATOW forecasting methodology that can assist the air transport industry in enhancing operational decision-making. This research used datasets acquired from the EUROCONTROL Performance Review Commission (PRC) 2024 Aircraft Take-Off Weight Estimation dataset featuring 527,000 flights over Europe containing aircraft details, air trips and flight conditions. Technique comprises structured data input, inspection of missing data, timestamp aggregation to identify demand cycles over time, and domain-specific feature engineering using distance_per_minute, block_minutes, taxiout_ratio, and a strong wake turbulence metric The two supervised learning models used were Linear Regression (LR) for understanding and XGBoost for performance prediction In comparison to LR's 4,409 kg MAE (mean absolute error), 7,061 kg RMSE (root mean square error), and 0.9825 R2 value, XGBoost significantly excelled with validation results showing an R2 value of 0.9992 and an RMSE of 1,514 kg In the absence of labelled test targets, cross-validation nevertheless showed a constant degree of generalizability The residual diagnostics showed that the model was reliable for practical execution with low-variance deviations that were unbiased An accurate ATOW estimate improves the demand-capacity balance and On-Time Performance (OTP) in ATM, which in turn affects the runway schedule, wake turbulence diversion, slot allocation, and fuel planning The results highlight the need to include ATOW predictions in both tactical and strategic planning to reduce delays, increase airspace usage, and promote sustainable aviation operation and possesses significant improvements will consist of weather and runway conditions, stochastic ambiguity computation, and drift monitoring to keep up with ever-changing operating variables while maintaining accurate forecasts.
Senthilkumar, N.S, GopalakrishnanGopinath, S
This study presents a data-driven approach for strengthening aviation safety by integrating human factors assessment with modern predictive modeling techniques. The work focuses on understanding how human performance, operational conditions, and system-level interactions collectively influence safety risk, and how these interactions can be quantified to support improved design and decision-making. Unlike previous studies that address human factors or predictive modeling in isolation, this research offers a unified framework that links causal human factors indicators with statistical modeling, feature extraction, and machine learning based risk estimation. The novelty of this work lies in the structured pipeline that transforms raw categorical and narrative human factors information into measurable predictors that can be analyzed using structural modeling and machine learning. The methodology includes data preparation, dimensionality reduction, latent pattern discovery, dependence modeling, model training, and interpretability analysis. The study demonstrates how this pipeline uncovers hidden relationships among operational errors, environmental influences, maintenance actions, design considerations, and crew behavior. The findings show that the integrated approach improves the accuracy and stability of risk prediction and highlights specific human factors patterns that consistently contribute to elevated risk levels. These insights support targeted mitigation strategies, inform design improvements, and help prioritize safety interventions. The work concludes that a combined human factors and predictive modeling framework enhances the ability of organizations to identify vulnerabilities earlier, allocate resources more effectively, and strengthen system resilience. This approach is adaptable to diverse aviation contexts and offers a practical path for transforming human factors data into actionable safety intelligence.
Valiyaparambil, Praveen
At present, with the rapid development of LNG powered ships, China’s LNG powered ships have formed a certain scale, but the speed of infrastructure construction such as bunkering stations restricts the development of LNG powered ships. In this process, “tank truck-to-ship bunkering”(TTS) has become one of the most widely used bunkering methods in China because of its flexible, fast and convenient characteristics, but there are many hidden dangers in the bunkering process. According to the characteristics of TTS, fault tree method is used to identify the risk of bunkering process, and the leakage of pipeline system is listed as the basic risk factor. The leakage probability of different aperture is analyzed by industry statistics. Three different leakage scenarios are selected and the consequences are simulated by PHAST software. The study shows that the failure of the valve and flange can easily lead to the leakage of LNG in the TTS process, and the leakage of the medium aperture and the full aperture will form the liquid pool, so some measures should be taken for the protection.
Dong, Yuanchao
The intersection of Safety of Intended Functionality (SOTIF) and Functional Safety (FuSa) analysis of driving automation features has traditionally excluded Quality Management (QM) components from rigorous safety impact evaluations. While QM components are not typically classified as safety-relevant, recent developments in artificial intelligence (AI) integration reveal that such components can contribute to SOTIF-related hazardous risks. Compliance with emerging AI safety standards, such as ISO/PAS 8800, necessitates re-evaluating safety considerations for these components. This paper examines the necessity of conducting holistic safety analysis and risk assessment on AI components, emphasizing their potential to introduce hazards with the capacity to violate risk acceptance criteria when deployed in safety-critical driving systems, particularly in perception algorithms. Using case studies, we demonstrate how deficiencies in AI-driven perception systems can emerge even in QM-classified components, leading to unintended functional behaviors with critical safety implications. By bridging theoretical analysis with practical examples, this paper argues for the adoption of comprehensive FuSa, SOTIF, and AI standards-driven methodologies to identify and mitigate risks in AI components. The findings demonstrate the importance of revising existing safety frameworks to address the evolving challenges posed by AI, ensuring comprehensive safety assurance across all component classifications spanning multiple safety standards.
Abbaspour, Ali RezaMahadevan, ShabinZwirglmaier, KilianStafford, Jeff
Pedestrian fatalities in traffic accidents continue to rise, with severe injuries often resulting from both vehicle impact and subsequent ground contact, frequently occurring outside the field of view of vehicle-mounted cameras. This study presents a proof-of-concept (PoC) approach for reconstructing three-dimensional pedestrian motion—including occluded regions—using dashcam video. The method integrates 2D human pose estimation (MMPose) and monocular depth estimation (Depth Anything V2),the latter was fine-tuned on a custom dataset, to generate 3D skeletal coordinates.To evaluate motion matching, the reconstructed pedestrian poses were quantitatively compared with a database of vehicle collision simulations using the THUMS human body model and skeletal data representing real-world crash scenarios generated in PC-Crash. Composite similarity indices based on thoracic center of gravity trajectory and torso orientation vectors were employed for this comparison. Preliminary results indicate that the fine-tuned system achieves an average RMSE of approximately 0.1 m for key skeletal points, enabling accurate depth estimation for 3D pose reconstruction. Matching experiments with 11 PC-Crash cases demonstrated high similarity scores, and reconstructed sequences successfully identified critical injury events such as head-to-ground contact in occluded regions, confirming the feasibility of this approach for accident reconstruction and injury risk assessment. However, this study remains preliminary, limited to controlled indoor experiments with a single vehicle type and few subjects. Real-world crash footage and diverse vehicle geometries were not considered, and skeletal reconstruction from actual accident videos has not yet been implemented. Future work will expand the simulation dataset, refine similarity weighting, and validate the approach using real crash video. Ultimately, this technology may support forensic analysis and emergency response, but further validation is required before real-world application.
Onishi, KojiWang, KewangUno, ErikoIchikawa, KojiTanase, NoboruAndo, Takahiro
To investigate the characteristics of injuries sustained by occupant with different lower limb postures under the frontal impact sled conditions. Using the finite element method a series of simulation analyses were conducted on THUMS (Total Human Model for Safety) AM50 human body model with four different postures, including standing posture, lower limb bent at 100°, 90°, and crossed forward-backward, under the frontal impact scenario at 56 km/h in this study. The simulation results indicated that the overall injury risk predicted by the THUMS AM50 huma body model with lower limb crossed forward-backward was higher than that predicted by the model with other postures. The values of injury criteria including of HIC (Head Injury Criterion), head resultant acceleration, and thoracic VC (Viscous Criterion) predicted by the THUMS AM50 huma body model with lower limb crossed forward-backward were highest in these series simulations. Also, the biomechanical responses, including stress or strain of thoracic/abdominal organs, pelvic cortical bone and knee ligaments, predicted by the THUMS AM50 huma body model with lower limb crossed forward-backward was higher than these predicted by the model with other postures.
Li, Dongqiangjiang, YejieTan, ChunLi, YanyanLi, YihuiWu, HequanJiang, BinhuiZhu, Feng
The automotive industry is evolving from a reactive, independently self-determined approach to cybersecurity, complicated by a complex supply chain. Over time, this has resulted in a fragmented industry comprised of any number of proprietary solutions verses a standardized, regulated paradigm to facilitate a platform-oriented approach. This document, an update on collaborative work from the SAE Vehicle Electrical Hardware Security Task Force (TEVEES18B) and GlobalPlatform Automotive Task Force, outlines this transition strategy. An extensible number of additional examples of use cases of Global Platform Technologies are explored in this document.
Mazzara, BillRawlings, Craig
This paper presents a scenario generation framework that creates diverse, parametrized, and safety-critical driving situations to validate the safety features of autonomous vehicles in simulation [1]. By modeling factors such as road geometry, traffic participants, environmental conditions, and perception uncertainties, the framework enables repeatable and scalable testing of safety mechanisms, including emergency braking, evasive maneuvers, and vulnerable road user protection. The framework supports both regulatory and edge case scenarios, mapped to hazards and safety goals derived from Hazard Analysis and Risk Assessment (HARA), ensuring traceability to ISO 26262 functional safety requirements and performance limitations. The output from these simulations provides quantitative safety metrics such as time-to-collision, minimum distance, braking and steering performance, and residual collision severity. These metrics enable the systematic evaluation of evasive maneuvering as a safety feature, while highlighting system limitations and edgecase vulnerabilities. Integration of scenario-based simulation with safety engineering principles offers accelerated validation cycles, improved test coverage at reduced cost, and stronger evidence for regulatory and stakeholder confidence.
Chandra Shekar, KiruthigaArab, Aliasghar
Path selection for the transport of hazardous materials (Hazmats) is a multi-facet decision problem that needs to account for multiple factors such as accident risk as well as transportation cost. Most existing literature has modeled the risk of Hazmats transportation as the product of accident loss, and its probability-based expected utility theory, however, could be problematic since such a risk definition does not necessarily reflect the real perceived risk by the decision-maker. This article proposes a novel approach to the path selection of Hazmats transportation based on the cumulative prospect theory (CPT). Specific steps in the decision of path selection are first laid out in the framework of CPT. Value (Loss) functions of accident in Hazmats transportation are then derived, together with the decision weighting function reflecting accident probabilities. For illustration, a case study is conducted using transportation data from a Hazmats transportation firm in Shanghai. Comparisons of path selections among the newly proposed approach, the existing methods based on expected utility theory, and the actual outcome from the decision-makers clearly indicate the superior performance of the proposed method. The results will enhance the safety level of road transportation of Hazmats.
Wang, XuleiSun, Chunwei
This paper presents the design, structural analysis, structural test validation and risk assessment done by Cummins to evaluate the structural integrity of Light Duty engine cylinder head for a Medium Wheelbase (MWB) pick-up truck. Initially, Cummins used the 2.5L and 3.0L (4-cylinder) engines that have standard power ratings based on existing requirements, but rising market demands for more power, fuel efficiency, lower cost and weight, and future emission compliance led to customer requirements for 15% uprate for 2.5L and 22% uprate for 3.0L from the same base engine. The increase in power requirement possesses challenges on critical components, especially cylinder heads in terms of thermal and structural limits. Multiple analysis led design iterations were performed using cutting edge CAE software such as Ansys, Dassault Systems fe-safe, and PTC Creo to ensure the structural integrity of the cylinder head under high thermal and mechanical loads, and to keep design margins within acceptable limits. A key feature identified through topology optimization was diagonal ribbing pattern on each cylinder, which is novel, and similar pattern can be applied to both new and existing engine platforms to enhance stiffness without major changes to the water jacket. The Cylinder head was subjected to a long endurance test, which comprises of high thermal and mechanical loads under extreme operating conditions. After running for specified number of hours as per inhouse test requirements, the engine was stopped for magnetic particle inspection for any signs of fatigue failure. No major cracks were observed on the 3.0L Cylinder head combustion face. However, a few cracks were observed on the 2.5L cylinder head combustion face at exhaust & intake bridges. Upon investigation, it was concluded that crack was due to high thermo-mechanical fatigue loads and hence further optimization was carried out on the cylinder head design. Furthermore, cylinder head gasket coolant orifice optimization is done to improve the coolant distribution to each cylinder. Thermal analysis showed a reduction in exhaust & intake bridge temperature within the acceptable limits. This paper captures the detailed design and structural analysis on 3.0L and 2.5 L diesel engine Cylinder head.
Pathak, Arun JyotiAdiverekar, VaidehiSingh, RahulBiyani, Mayur
Modal analysis is performed to determine the natural frequencies and mode shapes of a structure or system. It helps engineers understand how a system vibrates and how external forces, such as mechanical loads, might excite unwanted resonances. To check the stresses due to vibration inputs, certain G levels are assumed, and stresses are scaled to those vibration levels. This gives an understanding of the stresses of components with respect to its EFR limit and design margins are calculated. But, assumed acceleration levels in pre-prototype stage level can over predict or under predict the design margins. A quick modal analysis correlation technique can be used by using test measured accelerations conducted at prototype stage of the program. In this work, a modal analysis correlation technique is used to perform risk assessment of intake manifold. The intake manifold failed due to high vibration levels which were not captured from high cycle fatigue analysis with assumed G-level. In the modal analysis correlation technique, an effort is made to align the mode shape and frequency of the intake system and then with measured accelerations high cycle fatigue design margins are calculated. This gave accurate high stress location where in actual intake manifold was failed. Further design recommendations were suggested based on stress nature and location. This technique can be a quick risk assessment solution as only modal analysis with few peripheral components are required to be modelled in FEA analysis. This paper explores modal analysis correlation techniques, detailing the steps for aligning the mode shape and frequency of a system, while also addressing the limitations of the method.
Bale, Shrikant BhaskarBawache, Krushna
Threat Analysis and Risk Assessment (TARA) is a continuous activity, acting as a foundation of cybersecurity analysis for electrical and electronics automotive products. Existing TARA methodologies in the automotive domain exhibits challenges due to redundant and manual processes, particularly in handling recurring common assets across Electronic Control Units (ECUs) and functional domains. Two primary approaches observed for performing TARA are Manual-Asset-Centric TARA and Catalogue-Driven TARA. Manual-Asset Centric TARA is constructed from scratch by manually identifying the assets, calculating risks by likelihood, and impact determination. Catalogue-Driven TARA utilizes the precompiled likelihood and impact against identified assets. Both approaches lack standardized and modular mechanisms for abstraction and reuse. This results in poor scalability, increased efforts, and difficulty in maintaining consistency across vehicle platforms. The proposed method in this research overcomes such challenges, named as “MOSAIC-TARA”. It is a Modular, Scalable, Adaptive, Interoperable, Comprehensive TARA, decomposing a vehicle system into functional domains or ECUs, and further into its components. Each module is independently assessed and analyzed for potential threats, damage scenarios, and security goals, formulating the multiple TARA modules. These independent individual TARAs are then aggregated based on the architecture to derive ECU level TARA. The modularity of this method supports reusability of assessments across different ECUs, functional domains, and vehicle platforms. This enables optimized and efficient TARA tailored to different system configurations. Additionally, the presented approach introduces damage scenarios classification based on impact criticality, as the same component may lead to varying damage impact depending on the context. Thus, the TARA modules are developed for various levels of damage impacts, provides adaptability towards impact criticality of selected ECU or its functions. MOSIAC-TARA aligns with ISO/SAE 21434 and supports efficient reusable risk-driven design.
Goyal, YogendraSinha, SwatiSutar, SwapnilJaisingh, Sanjay
There is rapidly increasing advancement in Connectivity, Autonomous, Subscription and Electrification features in vehicles which are being developed. These trends have resulted in an increase in attack surface and security risks on vehicles. To handle these growing risks, it has become important to include passive security systems such as Intrusion detection systems (IDS) which can detect successful or possible attempts of intrusion into vehicle systems compromising their security. In vehicles based on Zonal Architecture, two types of IDS can be implemented, Network based IDS (NIDS) and Host Based IDS (HIDS). The NIDS is implemented in Gateway Electronic Control Unit (ECU) and can monitor multiple networks connected to Gateway, whereas the HIDS usually monitors one single host ECU. Extensive research material is available on NIDS for CAN Networks. For example, the CAN Network in a vehicle is monitored for various abnormal behaviours such as increased busload and invalid signal values. But most of the literature doesn't answer the question, how to ensure the monitoring achieved by NIDS is sufficient? In this paper we try to answer the question by deriving requirements for security monitoring of in-vehicle CAN network using a novel method to guarantee sufficiency in terms of having better coverage of intrusion scenarios. We employ a fusion of (i) Threat Analysis and Risk Assessment approach and (ii) Attack Tree Based approach for deriving security monitoring requirements for the CAN network. We show that security requirements derived by our approach have better coverage of intrusion scenarios, thus enhancing the efficiency in intrusion detection.
E L, Nanda KumarMutagi, MeghaSonnad, PreetiSharma, Dhiraj
Effective communication is the key for bringing harmony - be it the communication between humans and humans, or communication between machine and machine. Today’s car is a sophisticated gadget, equipped with the best of technologies running using millions of lines of codes of software. The effective use of these technologies involve communication between car to car and car to infrastructure using Dedicated Short-Range Communication (DSRC), C-V2X (Cellular Vehicle-to-Everything). It is pertinent that any communication using the internet needs to be digitally secure and that the systems are designed to mitigate the perceived threats. The methods used for ensuring cyber safety of automobiles need to be verified before the end product is put to use. Automotive Industry Standards AIS-189 and AIS-190 have been formulated to provide a harmonized verification framework. Both the vehicle manufacturer and the test agency need to equip themselves with necessary skills and tools to ensure compliance as per the laid down norms. With the ever-increasing use of software to run vehicles, the regulatory requirements would need to be constantly updated by reviewing the future threats involved and probable measures to mitigate them. The paper presents an overview of these important elements of cyber security regulations viz., applicable standards and approval procedure and means for a constant update of the two.
Nayak, PratikTandon, VikramBadusha, AkbarDesai, ManojSathianesan, Rejin
Modern automotive systems are becoming increasingly complex, comprising tightly integrated hardware and software components with varying safety implications. As the demand for ISO 26262 compliance grows, performing efficient and consistent Hazard Analysis and Risk Assessment (HARA) across these layers presents both methodological and practical challenges. Traditional approaches often involve performing HARA for an item (where item maybe a system or a combination of systems), which can lead to update of HARA for every new feature addition in an item, which in turn may lead to analysis of same functions in multiple HARAs leading to inconsistent risk categorization, redundancy, or even conflicting safety goals. Therefore, this paper proposes a unique HARA methodology which consolidates the list of functions from various systems and performs the HARA for the grouped functions (hereby referred to as Cluster HARAs). For example, Electrical power steering, Electric pump powered hydraulic steering, Electric motor assisted – hydraulic steering, have identical functions but are being analysed separately for many years which causes redundancy and results in increased effort. Once a cluster HARA is created, in case of development of a new feature/function or update of an existing feature/function, we check only for similar functions in the existing cluster HARAs and take up the corresponding safety goals. In this way, all the systems / components which has the same function, refer to the cluster HARA and no redundant HARAs are created, resulting in decreased effort from implementation point of view. In short, the proposed methodology will greatly reduce the number of HARAs that are handled across all systems. The benefits of using this methodology also involve identifying unique safety goals for each function, irrespective of how the function is implemented. When the new E/E features are developed which uses the existing vehicle functions, it simplifies the workflow by reusing the existing cluster HARAs.
Somasundaram, ManickamVijayakumar, Melvin
The proliferation of wireless charging technology in electric vehicles (EVs) introduces novel cybersecurity challenges that require comprehensive threat analysis and resilient design strategies. This paper presents a proactive framework for assessing and mitigating cybersecurity risks in wireless charger Electronic Control Units (ECUs), addressing the unique vulnerabilities inherent in electromagnetic power transfer systems. Through systematic threat modeling, vulnerability assessment, and the development of defense-in-depth strategies, this research establishes design principles for creating robust wireless charging ecosystems resistant to cyber threats. The proposed framework integrates hardware security modules, encrypted communication protocols, and adaptive threat detection mechanisms to ensure operational integrity while maintaining charging efficiency. Experimental validation demonstrates the effectiveness of the proposed security measures in preventing unauthorized access, data manipulation, and service disruption attacks while preserving system performance.
Uthaman, SreekumarMulay, Abhijit BGadekar, Pundlik
This article provides an overview of how the determination of absence of unreasonable risk can be operationalized. It complements previous theoretical work published by existing developers of automated driving systems (ADS) on the overall engineering practices and methodologies for readiness determination. Readiness determination is, at its core, a risk assessment process. It is aimed at evaluating the residual risk associated with a new ADS deployment. The article proposes methodological criteria to ground the readiness review process for an ADS release. Specifically, it lists 12 readiness criteria connected with system safety, cybersecurity, verification and validation, collision avoidance testing, predicted collision risks, impeded progress, rules of the road compliance, vulnerable road users interactions, high-severity assessment, conservative estimate of severity, risk management, and field safety. The criteria presented are agnostic of any specific ADS technological solution and/or architectural choice, to support broad implementation by others in the industry. While intended to support the readiness evaluation for the deployment of an SAE Level 4 ADS, their use can also be generalized for lower levels of automation and combined with the unique human interaction challenges applicable to those levels. Following the presentation of the proposed criteria, the article continues with a discussion on governance and decision-making toward approval of a new release candidate for the ADS, inclusive of a discussion on factors that affect residual risk and risk management practices. The implementation of the presented criteria requires the existence of appropriate safety management practices in addition to many other cultural, procedural, and operational considerations. As such, the article is concluded by a statement of limitations for those wishing to replicate part or all of its content. The content presented here serves to inform important ongoing conversations on the topic of ADS certification and the standardization of approval guidelines in international regulatory contexts.
Favaro, Francesca MargheritaSchnelle, ScottFraade-Blanar, LauraVictor, TrentPeña, MauricioWebb, NickBroce, HollandPaterson, CraigSmith, Daniel
This article presents a system to incorporate crash risk into navigation routing algorithms, enabling safety-aware path optimization for autonomous and human-driven vehicles alike. Current navigation systems optimize travel time or distance, while our approach adds crash probability as a routing criterion, allowing users to balance efficiency with safety. We transform disparate data sources, including traffic counts, crash reports, and road network data, into standardized risk metrics. Because traffic volume data only exist for a small subset of road segments, we develop a solution to project average daily traffic estimates to an entire road inventory using machine learning, achieving sufficient coverage for practical implementation. The framework computes exposure-normalized crash rates weighted by severity and integrates these metrics into routing cost functions compatible with existing navigation algorithms. The key strength of our solution is its scalability. In addition to the mapping data required by the navigation system, it requires only two additional data sources commonly maintained by transportation authorities: geolocated crash reports and traffic counts, enabling deployment across diverse jurisdictions. For connected and automated vehicles, the framework provides quantitative risk assessment for path planning algorithms. For conventional vehicles, it enables drivers to make informed routing choices based on safety preferences. Our empirical validation demonstrates that risk-aware routing achieves substantial safety improvements while maintaining reasonable travel times. The methodology also serves transportation agencies by systematically identifying high-risk corridors and crash patterns across road networks. By establishing a standardized approach to safety-aware navigation, this work addresses an important gap in current routing systems and contributes to the development of safer transportation infrastructure.
Skaug, LarsNojoumian, Mehrdad
Heavy-haul railways are a critical component of China’s dedicated freight rail network, serving as the primary land transport channel for energy and resource intermodal transportation. Their safe operation and transportation is essential for ensuring the reliable delivery of energy and raw materials. Taking the Shuohuang Heavy-haul Railway as a case study, based on the hazards identified across its entire operational chain, an ontology model structured as "professional module–task–process–hazard–risk attribute–management object" is constructed in this paper. Based on this model, a knowledge graph for heavy-haul railway operational emergencies is established. The study analyzes the connectivity between different nodes (e.g., work processes and hazards) in the knowledge graph and their potential relationships with risk values. Using directed graph-based degree centrality analysis, a risk assessment method incorporating node centrality is proposed. Risk values are computed at both the hazard and process levels, followed by risk ranking and analysis. The risk ranking results demonstrate that considering node centrality yields rankings that better reflect the complex division of labor in heavy-haul railway transportation system, thereby providing more effective support for emergency risk management. The research results can provide decision-making support for the prevention and control of emergencies in heavy-haul railway operations, as well as safety management.
Fu, LiqiangRen, XiaolinRong, Lifan
In order to understand the changes of freeway traffic flow risk,drone videos was used to obtain vehicles trajectories on the freeway, analyzing the spatio-temporal interactions between vehicles, the propagation patterns of traffic conflicts, and the pattern of risk changes. Classify traffic flow states based on three-phase traffic theory. Starting from the frequency and severity of conflicts, the risk characteristics under different traffic flow states was investigated. The fuzzy C-means clustering algorithm was used to determine the risk level. Results indicate that the vehicles in the first lane on the left were more sensitive to the speed changes of the leading vehicles. The deceleration wave is highly consistent with the propagation path of traffic conflicts. When the backward propagation of deceleration waves, the collision risk also propagates backward simultaneously. In the process of transitioning from free flow to synchronized flow, high-risk state accounts for the highest proportion, about 30.5%. The findings of this paper provide quantitative technical support for active traffic safety management on freeways, holding certain significance in aspects such as traffic flow management and speed control.
Ma, XiaolongLiu, JianbeiSun, ZhuWang, Jing
Although the number of trucks is low, their accident rate is high, and the consequences of accidents are severe. This paper is based on GPS data from 100 trucks, with each trip chain defined by a vehicle’s stay time greater than 20 minutes. The kinematic parameters for each trip chain are then extracted, and the entropy weight method is used to calculate the weights of various parameters. A random forest model is applied to select 11 key indicators, including speed and acceleration. The entropy weight-TOPSIS algorithm is used to assess the risk of each trip chain for the trucks. Different combinations of continuous and discontinuous trip chain scenarios are constructed. Finally, support vector machines (SVM) and decision tree methods are used for risk prediction under different trip chain combinations. The results show that the 11 selected key indicators provide an accuracy of 95.74% for describing the sample. In general, the SVM model shows better prediction accuracy than the decision tree under different trip chain combinations, though the decision tree results fluctuate significantly. As the penalty parameter in SVM and the minimum leaf node in the decision tree increase, the accuracy of the model gradually decreases.
Huang, YunheXiong, ZhihuaLi, Jiayu
In this Q&A, Audrey Turley, director of lab operations – biosafety at Nelson Laboratories, spoke with Medical Design Briefs about the critical importance of monitoring and managing material changes in medical devices. Even seemingly minor shifts — such as switching suppliers or altering processing steps — can introduce unknown additives or variations that impact biocompatibility and, ultimately, patient safety. Turley discusses how manufacturers can effectively document and justify changes, maintain regulatory compliance, and strengthen supplier relationships to ensure ongoing device safety. She also shares insights into trends shaping post-pandemic supply-chain strategies and the growing emphasis on proactive risk assessment and communication across the product lifecycle.
Thermal runaway in lithium-ion batteries represents a critical safety challenge, particularly in high-voltage battery systems used in electric vehicles and stationary energy storage. A comprehensive understanding of the multi-scale processes that initiate and propagate thermal runaway is essential for the development of effective safety measures and design strategies. This study provides a structured theoretical overview of the thermal runaway phenomenon across four hierarchical levels: electrode, single cell, module, and high-voltage battery system. At the electrode level, thermal runaway initiation is linked to electrochemical and chemical degradation mechanisms such as solid electrolyte interphase decomposition, separator breakdown, and internal short circuits. These processes lead to highly exothermic reactions that, at the cell scale, can result in rapid temperature increases, gas generation, and overpressure. On the module and system levels, thermal runaway can propagate through thermal and mechanical coupling between neighboring cells, influenced by layout, cooling design, and enclosure properties. The core contribution of this study lies in a detailed modeling approach that focuses exclusively on the chemical and thermal decomposition reactions occurring at the electrode scale. These reactions form the foundational layer of a broader simulation framework to be developed in subsequent work. A semi-empirical model is proposed, capturing key phenomena such as electrolyte decomposition, solid electrolyte interphase breakdown, and active material reactions. The model integrates thermal conduction and heat generation from exothermic reactions to characterize the local temperature evolution during the early stages of thermal runaway. By isolating and accurately representing these fundamental decomposition pathways, this modeling approach provides a critical building block for future extensions toward higher-scale thermal runaway simulations. It offers valuable insights into the onset mechanisms of thermal instability, supporting battery design optimization and risk assessment from the ground up.
Ceylan, DenizKulzer, André CasalWinterholler, NinaWeinmann, JohannesSchiek, Werner
This work proposes a novel framework for evaluating the second- and third-life viability of lithium-ion battery packs through the development of the RISE Index—a comprehensive metric based on Resistance growth, Integrity, Safety, and End-of-life usability. While previous research focuses on singular indicators such as residual capacity or State of Health (SoH), these approaches lack a unified, safety-informed structure for reuse qualification. This paper distinguishes itself by integrating multiple aging indicators, including resistance evolution, degradation theory, and thermal safety considerations, into a consolidated decision-making tool designed for practical deployment. The novelty lies in the formulation of the RISE Index, which fuses empirical data with electrochemical degradation mechanisms such as SEI formation, lithium plating, calendar aging, and cycling-induced impedance growth. The methodology includes a comparative analysis of Nickel Manganese Cobalt (NMC) and Lithium Iron Phosphate (LFP) chemistries using Electrochemical Impedance Spectroscopy (EIS), Direct Current Internal Resistance (DCIR), and model-based estimation to characterize resistance trends under varied operational conditions. Theoretical models for impedance growth link internal changes to observable resistance behavior. Findings indicate that LFP cells offer superior thermal and impedance stability, while NMC requires stricter monitoring due to accelerated resistance growth. The RISE Index enables stakeholders to classify and prioritize used battery packs for safe and efficient second- and third-life use, thereby addressing a critical industry gap. This integrated approach represents a significant advancement over prior work by embedding safety, usability, and degradation science into a unified lifecycle optimization framework.
Prakashkumar, Balagopal
This standard is for use by organizations that procure and integrate EEE Parts. These organizations may provide EEE Parts that are not integrated into assemblies (e.g., spares and/or repair EEE Parts). Examples of such organizations include, but are not limited to, the following: Original Equipment Manufacturers; contract assembly manufacturers; maintenance, repair, and overhaul (MRO) organizations; and suppliers that provide EEE Parts or assemblies as part of a service. These requirements are intended to be applied (or flowed down as applicable) through the supply chain to all organizations that procure and integrate EEE Parts and/or systems, subsystems, or assemblies. The mitigation of Counterfeit EEE Parts in this standard is risk based. These mitigation steps will vary depending on the criticality of the application and desired performance and reliability of the equipment/hardware. The requirements of this document are used in conjunction with the organization’s higher-level quality standard(s) (e.g., AS 9100, ISO 9001, ASQ/ANSI E4, ASME NQA-1, AS9120, or equivalent) and other quality management system documents (e.g., AS9110 used by MRO organizations). They are not intended to stand alone, supersede, or cancel requirements found in other quality management system documents, requirements imposed by contracting authorities, or applicable laws and regulations unless an authorized exemption/variance has been obtained. This document is not intended to make a legal determination of fraud, for which appropriate legal counsel should be consulted for further action. For the purposes of this document, the term “risk” is synonymous with Counterfeit Risk.
G-19 Counterfeit Electronic Parts Committee
.
Xie, DongxuanLi, DongyangZhang, YoukangZhao, YingjieHong, BaofengWang, Nan
In-Use emission compliance regulations globally mandate that machines meet emission standards in the field, beyond dyno certification. For engine manufacturers, understanding emission compliance risks early is crucial for technology selection, calibration strategies, and validation routines. This study focuses on developing analytical and statistical methods for emission compliance risk assessment using Fleet Intelligence Data, which includes high-frequency telematics data from over 500K machines, reporting more than 1000 measures at 1Hz frequency. Traditional analytical methods are inadequate for handling such big data, necessitating advanced methods. We developed data pipelines to query measures from the Enterprise Data Lake (A Structured Data storage system), address big data challenges, and ensure data quality. Regulatory requirements were translated into software logic and applied to pre-processed data for emission compliance assessment. The resulting reports provide actionable insights on NOx sensor activity, engine warmup operations, high-risk drive cycles, and load profiles across different operation regimes. This approach significantly reduces the reliance on costly and labor-intensive physical testing with Portable Emissions Measurement Systems (PEMS) by integrating advanced analytical methods into the workflow. By leveraging high-frequency telematics data, this method enables engineers to identify failed machines in the field more efficiently. It also provides valuable insights and reasoning behind these failures, facilitating quicker and more informed decision-making. This not only enhances emission compliance monitoring but also optimizes resource allocation and reduces overall regulatory risks. In summary, the developed methods enable effective emission compliance monitoring, reduce regulatory risks, and help optimize calibration strategies by understanding customer usage patterns. These methods are scalable for various emission regulations.
Arya, Satya PrakashShekarappa, Kiran
Mobile air conditioning (MAC) systems play a critical role in ensuring occupant thermal comfort, particularly under extreme ambient conditions. Any delay in compressor engagement directly affects cabin cooldown performance, impacting both perceived and measured comfort levels. This study assesses the thermal comfort risks associated with compressor engagement delays of 6.5 seconds and 13 seconds under varying ambient conditions. A comprehensive frontloading approach was employed, integrating 1D CAE simulations with objective and subjective experimental testing. Initial simulations provided insights into transient cabin heat load behavior and air distribution effectiveness, enabling efficient test case selection. Physical testing was conducted in a controlled climatic chamber under severe (>40°C) ambient condition, replicating real-world scenarios. Objective metrics, including cabin air temperature, vent temperature and cooldown rates, were measured to quantify thermal performance variations. To capture the human perception of comfort, subjective evaluations were conducted using jury assessments. Trained jurors provided feedback on perceived temperature uniformity, initial thermal shock and overall cooling effectiveness. Comparative analysis between the two delay scenarios revealed significant differences in early-stage occupant thermal comfort, with prolonged compressor engagement delay leading to delayed cooldown, increased discomfort perception and reduced thermal acceptability, especially in high-temperature conditions. Results highlight the importance of compressor engagement timing in optimizing both system efficiency and occupant comfort. The study demonstrates that a 13-second delay can exacerbate thermal discomfort, particularly under severe ambient conditions, potentially affecting customer satisfaction. By integrating simulation-driven frontloading with targeted physical testing and subjective assessments, this methodology provides a robust framework for evaluating thermal comfort risks in automotive HVAC systems. The findings support informed decision-making for MAC system calibration, ensuring an optimal balance between energy efficiency and occupant well-being.
Kulkarni, ShridharDeshmukh, GaneshJoshi, GauravShah, GeetJaybhay, Sambhaji
Discovering the trend of risk changes and formulating risk prevention and control measures are important links in achieving proactive risk prevention and control. Constructing and analyzing field models can visualize the distribution and change of risks and formulate effective risk prevention and control measures. Based on the current situation and trend of field model research, this paper discusses its application in risk identification, aiming to improve the accuracy of risk avoidance. Firstly, different types of field models are classified, and their respective characteristics and application scenarios are introduced. Secondly, the shortcomings in the development of field models are summarised. Finally, in the field of autonomous driving and intelligent traffic management, it is proposed that the accuracy of the model can be improved by multi-scene data fusion, the dynamic response enhances the efficiency of risk avoidance, and the aspect of risk classification in complex environments to enhance the universality of the model provides new ideas for the further application of the field model in the field of intelligent traffic.
Song, YulianYue, LihongWang, Chunxiao
The early stages of product planning and concepting in advanced engineering domains are often hampered by high uncertainty, fragmented decision-making, and unstructured data. Traditional planning methodologies routinely lead to misalignment, inefficient risk assessments, and suboptimal product strategies. To address these challenges, we propose an AI-agentic decision intelligence (DI) framework that leverages Large Language Models (LLMs) to enhance decision-making in product planning and concept development. The proposed framework uses the transformative natural language processing capabilities and comprehensive knowledge of LLMs to capture and refine stakeholder intent, improve stakeholder engagement, and optimize workflow orchestration. Implementation of the framework is facilitated by state-of-the-art and rapidly evolving open-source tools, ensuring scalability and readiness for corporate environments. By enhancing decision confidence, adaptability, and automation, the framework provides a valuable platform for both defense and commercial product development environments.
Murat, AlperChinnam, Ratna BabuRana, SatyendraRapp, Stephen H.Hansen, KurtRichman, Todd A.Bechtel, James E.
This document describes a process that may be used to perform the ongoing safety assessment for (1) GAR aircraft and components (hereafter, “aircraft”), and (2) commercial operators of GAR aircraft. The process described herein is intended to support an overall safety management program. It is associated with showing compliance with regulations and also establishing and meeting internal company safety standards. The process described herein identifies a systematic means, but not the only means, to assess continuing airworthiness. Ongoing safety management is an activity dedicated to assuring that risk is identified and properly eliminated or controlled. The safety management process includes both safety assessment and economic decision-making. While economic decision-making (factors related to scheduling, parts, and cost) is an integral part of the safety management process, this document addresses only the ongoing safety assessment process. This ongoing safety assessment process includes safety problem identification and corrective action, tracking of problems, the application of “lessons learned“ to improve the efficiency of the process, and reduction of the time to achieve corrective action in the field. ARP5150 is the recommended practice for the safety assessment of transport airplanes in commercial service. ARP5151 is the recommended practice for the safety assessment process for GAR aircraft in commercial services. While the processes are similar, their implementations are different due to operations, data availability, and sizes of individual operations.
S-18C Ongoing Safety Assessment Committee
Hydroplaning contributes to approximately 20% of traffic accidents during adverse weather conditions, with factors such as velocity, water film thickness, tire inflation, and vehicle weight playing significant roles. This study aims to simulate the hydroplaning phenomenon using a fluid–structure interaction model based on the coupled Eulerian–Lagrangian (CEL) capabilities of ABAQUS. Results reveal that vehicle linear velocity is a key determinant of hydroplaning risk, with a positive correlation observed. The findings suggest maintaining speeds under 50 km/h to mitigate hydroplaning risk, contingent on well-maintained, properly inflated tires. Multiple linear regression analysis further demonstrates correlations among velocity, tire inflation, quarter vehicle load, and water film thickness in predicting the reaction force between the tire and roadway. The proposed scheme provides a predictive mechanism for hydroplaning risk under varying conditions, offering valuable insights into prevention strategies. The proposed scheme offers a valuable predictive mechanism for understanding and mitigating hydroplaning risk by analyzing key environmental and vehicle parameters. It identifies the critical factors influencing hydroplaning, including velocity, tire inflation, water film thickness, and vehicle load, while offering actionable insights to reduce risk. By employing advanced simulation techniques, specifically ABAQUS with CEL capabilities, the model provides a realistic and accurate representation of the hydroplaning phenomenon. Furthermore, the correlation analysis offers a comprehensive understanding of the relationship between multiple variables, enabling risk assessment under varying conditions. This approach not only highlights the underlying physics of hydroplaning but also supports evidence-based strategies for risk reduction and improved vehicle safety.
Aboelsaoud, MostafaTaha, Ahmed AbdelsalamAbo Elazm, MohamedElgamal, Hassan Anwar
This study introduces an innovative intelligent tire system capable of estimating the risk of total hydroplaning based on water pressure measurements within the tread grooves. Dynamic hydroplaning represents an important safety concern influenced by water depth, tread design, and vehicle longitudinal speed. Existing intelligent tire systems primarily assess hydroplaning risk using the water wedge effect, which occurs predominantly in deep water conditions. However, in shallow water, which is far more prevalent in real-world scenarios, the water wedge effect is absent at higher longitudinal speeds, which could make existing systems unable to reliably assess the total hydroplaning risk. Groove flow represents a key factor in hydroplaning dynamics, and it is governed by two mechanisms: water interception rate and water wedge pressure. In both the shallow water and deep water cases, the groove water flow will increase as a result of increasing the longitudinal speed of the vehicle for a constant water depth. Therefore, the water pressure in the tread grooves will also increase as the longitudinal speed of the vehicle approaches the critical hydroplaning speed. Unlike conventional systems, the proposed intelligent tire design utilizes the amplitude and shape of the measured pressure signals from the tread grooves for estimating the total hydroplaning risk in both shallow and deep water conditions. Experimental results indicate that peak groove water pressure increases with the risk of total hydroplaning. Furthermore, the overall shape of the pressure signal will also be influenced by the total hydroplaning risk. By addressing the limitations of current intelligent tire systems, the proposed intelligent tire design offers a robust solution for real-time total hydroplaning risk estimation across diverse driving conditions.
Vilsan, AlexandruSandu, CorinaAnghelache, GabrielWarfford, Jeffrey
Aircraft Certification is a mature and complex bureaucracy that has successfully ensured a very high degree of safety of aircraft design, construction, operation and maintenance. Outside of a very few doing the work, there is a general lack of knowledge of certification details. For novel technologies such as electric power, and innovative configurations such as multi-rotors, the rules are far less mature and still emerging and so also poorly understood. Within the Advanced Air Mobility (AAM) initiative, many new aircraft developments are underway using novel configurations, and the public announcements of regulatory progress toward FAA or EASA Type Certification capitalize on this ignorance by being vague or even misleading. Honeywell conceived the Regulatory Readiness Level (RRL) indicator as an objective measure of certification status to serve the AAM industry and ecosystem, with applicability across aviation. The released RRL Version 1 now enables credible, objective assessment of new aircraft progress toward FAA Type Certification, and Operational Approval for Part 135 operations, to allow consistent apples-to-apples comparisons with other aircraft in development. An emerging complementary version of the rubric for EASA Type Certification is ready for publication to enable RRL determination against the European Union criteria. Future releases will consider other Nation's regulatory authorities, supplemental types certifications (STCs), and risk-based airworthiness assessments such as the Specific Operations Risk Assessments (SORA).
Agrawal, PulkitNewman, Daniel
Airworthiness certification of aircraft requires an Airworthiness Security Process (AWSP) to ensure safe operation under potential unauthorized interactions, particularly in the context of growing cyber threats. Regulatory authorities mandate the consideration of Intentional Unauthorized Electronic Interactions (IUEI) in the development of aircraft, airborne software, and equipment. As the industry increasingly adopts Model-Based Systems Engineering (MBSE) to accelerate development, we aim to enhance this effort by focusing on security scope definitions – a critical step within the AWSP for security risk assessment that establishes the boundaries and extent of security measures. However, our findings indicate that, despite the increasing use of model-based tools in development, these security scope definitions often remain either document-based or, when modeled, are presented at overly abstract levels, both of which limit their utility. Furthermore, we found that these definitions frequently lack alignment with airworthiness security regulations. To address these two distinct gaps, this paper presents a model-based approach for detailed security scope definitions using the Systems Modelling Language (SysML). Our approach aligns with airworthiness security regulations ED-202A / DO-326A and ED-203A / DO-356A and incorporates a SysML profile based on the CORAS language for accurate modeling of security scopes. This facilitates a model-based security risk assessment by creating unambiguously system models that represent assets through model elements, document entry points to the assets and determine their environment. This SysML-based approach supports certification related activities by ensuring that security scope definitions are comprehensive and aligned with airworthiness regulations, directly addressing the identified gaps. The approach's applicability and effectiveness are demonstrated through an illustrative example in the domain of aircraft cabin system development. Moreover, the approach provides valuable inputs that assist operators in deriving guidance for the safe operation and maintenance of the aircraft, complementing existing methods and practices.
Hechelmann, AdrianMannchen, Thomas
This paper presents a conceptual study on how to perform an 8-step software FMEA by adding a signal analysis step into the 7-step FMEA of AIAG-VDA1st edition. In 8-step software FMEA, structural analysis, functional analysis, and the newly added signal analysis steps correspond to software architecting. Thus, the 8-step software FMEA has the effect of integrating software architecting and FMEA, and this study defines it as integrated software FMEA. In the structure tree, the functionality-assigned elements are designed to produce their variables through signal analysis, and by utilizing this variable information, it is newly proposed that software FMEA can be linked and extended to dependent failure analysis and fault tree analysis. In addition, the optimization step uses the variable information to link failure mitigation and prevention measures to verification and validation tests with traceability, which is helpful to verify its results. Since the 7-step FMEA of AIAG-VDA1st edition recommends the use of a spreadsheet, the integrated software FMEA templates the spreadsheet and applies automation functions to the template to define elements with the functionality and failure modes for their functions in a highly-readable manner. Furthermore, the software architecture design specification and software FMEA report can be generated, including a new type of dynamic sequential view diagram. This way, software FMEA can be performed quickly and easily, and its deliverables can be of a higher level of quality.
Han, PoongGyoo
Items per page:
1 – 50 of 478