PRO-ELICERE: A Hazard Analysis Automation Process Applied to Space Systems


  • Tharcius Augusto Pivetta Instituto Tecnológico de Aeronáutica - ITA
  • Glauco da Silva Instituto Tecnológico da Aeronáutica - ITA
  • Carlos Henrique Netto Lahoz Massachusetts Institute of Technology - MIT
  • João Batista Camargo Júnior Escola Politécnica da Universidade de São Paulo – POLI/USP


ELICERE, Hazard Analysis, Safety, Dependability, Quality Attributes, Space Systems


In the last decades, critical systems have increasingly been developed using computers and software even in space area, where the project approach is usually very conservative. In the projects of rockets, satellites and its facilities, like ground support systems, simulators, among other critical operations for the space mission, it must be applied a hazard analysis. The ELICERE process was created to perform a hazard analysis mainly over computer critical systems, in order to define or evaluate its safety and dependability requirements, strongly based on Hazards and Operability Study and Failure Mode and Effect Analysis techniques. It aims to improve the project design or understand the potential hazards of existing systems improving their functions related to functional or non-functional requirements. Then, the main goal of the ELICERE process is to ensure the safety and dependability goals of a space mission. The process, at the beginning, was created to operate manually in a gradual way. Nowadays, a software tool called PRO-ELICERE was developed, in such a way to facilitate the analysis process and store the results for reuse in another system analysis. To understand how ELICERE works and its tool, a small example of space study case was applied, based on a hypothetical rocket of the Cruzeiro do Sul family, developed by the Instituto de Aeronáutica e Espaço in Brazil.






Original Papers