Search Results

Exposure in ISO 26262 is defined as the state of being in an operational situation that can be hazardous if coincident with the failure mode under analysis. An operational situation is defined as a scenario that can occur during a vehicle's life with examples given such as driving, parking, or maintenance. Accurately predicting exposure is one of the more difficult tasks in the ASIL determination. ISO 26262 Part 3 attempts to provide guidance in Annex B through tables of potential operational situations and associated exposure levels. However, the contents of these tables may not allow for an accurate prediction of exposure and may lead to an exposure value that is too high or too low. In this paper, we describe a potential method for determining exposure that considers a potential mishap scenario as a composition of multiple coincident operational situations rather than considering a single operational situation as indicated in the tables in Annex B of Part 3.

Today's vehicles contain a number of safety-critical systems designed to help improve overall vehicle safety. Such systems may control vital vehicle functions such as steering, braking and/or propulsion independently of the driver. In today's vehicles, much emphasis has been placed on helping ensure that these safety-critical vehicle systems operate as intended. Applying rigorous system safety engineering principles in developing these safety-critical automotive systems helps ensure that they operate as desired and expected. Less emphasis has been placed to-date on helping ensure cybersecurity of cyber-physical automotive systems. However, this is changing as both the world and the automotive industry become more aware of the potential ramifications of cyber-attacks on vehicles.