随着数字化技术及软件系统的广泛应用,很多事故是由于部件间异常的交互所引起,传统的分析方法已经力不从心,基于STAMP（Systems-Theoretic Accident Model and Processes）的安全性分析方法STPA（System Theoretic Process Analysis）,可以有效解决这一困难。首先介绍STPA方法及分析步骤,将该方法应用到反应堆紧急停堆子系统,得到了引起停堆失败的可能原因及设计中所应遵守的安全约束,这些约束有益于提高设计的安全性。
摘要(英文)：
Most accidents are caused by dysfunctional interactions among components because of the widely used of digital technology and software nowadays. Traditional analysis methods cannot get a satisfactory result. In order to solve this problem, a new accident model named STAMP which based on system theoretic and STPA application methods. This paper introduces STPA method and its analysis steps in at first. Then we try to apply it for shutdown subsystem in NPPs and get the causal factors and safety constraints which should be obeyed in the design. It...
