Combination of Fault Tree Analysis and Model Checking for Safety Assessment of Complex System

Safety assessment of complex systems traditionally requires the combination of various results derived from various models. The Altarica language was designed to formally specify the behaviour of systems when faults occurs. A unique Altarica model can be assessed by means of complementary tools such as fault tree generator and model-checker. This paper reports how the Altarica language was used to model a system in the style of the hydraulic system of the Airbus A320 aircraft family. It presents how fault tree generation and model-checking can be used separately then combined to assess safety requirements.