Model-based design of resilient systems using quantitative risk assessment.

Fault detection, isolation and recovery subsystems are accepted to make safety-critical systems resilient against faults and failures. Yet, these subsystems should be devised only for those faults that violate the system's requirements, while providing a correct approach such that requirements are met again. Consequently, the obtained system is minimal, although complete, and robust both with respect to safety and performance requirements. In this paper, we propose a systematic and automated approach based on formal methods that includes (1) the evaluation of the relevance of faults based on quantitative risk assessment, and (2) the validation of system robustness by statistical model checking. We apply this approach on an excerpt of a real-life autonomous robotics case study, and we report on the implementation and results obtained with the S BIP framework. [ABSTRACT FROM AUTHOR]