Abstract The increasing complexity of the Advanced Driver Assistance Systems (ADAS) is making more difficult to perform the Hazard Analysis and Risk Assessment (HARA). These items require high-performance Electronic Control Units (ECU) with extensive software functionalities. To correctly operate they interact with the driver, environment and other vehicle functions through high-speed in-vehicle networks, as well as a wide range of sensors and actuators. As a result, they implement complex behaviors whose outcome in presence of faults is not trivial to identify and classify as requested by the concept phase included in the most recent functional safety standards. In this paper we present a simulation-based methodology to perform the HARA of a vehicle function by mixing the usual industrial approach, based on the designers' knowledge, with one that makes use of a vehicle-level simulator. The simulation-based approach provides an automatic and systematic method to assess the complex interaction of the item under analysis with other vehicle functions in possibly complex operational situations, thus making the prediction of hazards easier. We choose to demonstrate the approach by applying it to a well-known automotive industry case study: an Advanced Emergency Braking System (AEBS). In this way, it is possible to analyze the effects of the function provided by the item, keeping into account the simulations results and comparing them to similar situations analysis available in literature. Thanks to the obtained simulation-based results, safety engineers can formulate a more objective hypothesis, in particular during the hazard classification subphase.

中文翻译：

---

一种辅助高级驾驶辅助系统危险分析和风险评估的基于模拟的方法

摘要 高级驾驶辅助系统 (ADAS) 的日益复杂使得执行危害分析和风险评估 (HARA) 变得更加困难。这些项目需要具有广泛软件功能的高性能电子控制单元 (ECU)。为了正确操作，它们通过高速车载网络以及各种传感器和执行器与驾驶员、环境和其他车辆功能进行交互。因此，它们实施了复杂的行为，其在出现故障时的结果对于根据最新功能安全标准中包含的概念阶段的要求进行识别和分类并非易事。在本文中，我们提出了一种基于仿真的方法，通过混合通常的工业方法，基于设计师的知识来执行车辆功能的 HARA，一个使用车辆级模拟器。基于仿真的方法提供了一种自动和系统的方法来评估分析中的项目与其他车辆功能在可能复杂的操作情况下的复杂交互，从而更容易地预测危险。我们选择通过将其应用于著名的汽车行业案例研究来展示该方法：高级紧急制动系统 (AEBS)。通过这种方式，可以分析项目提供的功能的影响，同时考虑模拟结果并将其与文献中可用的类似情况分析进行比较。由于获得了基于模拟的结果，安全工程师可以制定更客观的假设，尤其是在危险分类子阶段。