Mr. Axel Firsching is a worldwide respected key player in all Ariworthiness aspects of aviation powerplants and their installations. He was the long-standing very experienced Head of the Airworthiness Office of a global aviation group. He graduated in 1985 with Prof. Dr.-Ing. Kappler and MTU AeroEngines. From 1991 until 2017 he worked for Rolls Royce Germany Ltd & Co KG. In 2017 he founded the AF Aviation Consulting. Abstract Small causes may sometimes have a large impact. This presentation looks at an extreme occurrence, which happened on an Airbus A380 in 2010, and which may have caused the loss of 469 lives on board plus others on the ground. Following a look on some aircraft data a number of photos from the damaged aircraft and of ground damage will visualize the immediate consequences of this engine failure. As derived from the subsequent accident investigation the chain of events will be explained. Starting from a "minor" manufacturing deviation the situation rapidly developed into a massive engine failure, which could not be averted by the safety mechanisms installed in the engine. Finally some thoughts will be discussed how to prevent such an issue in the future.

Mr. Parsa is currently completing his PhD in Systems Engineering at the University of Queensland on Abnormal Situation Management, modelling alarm system vs human situational awareness” and providing guest lecturing on system safety engineering and systems engineering. As a result of his study there is a patent about alarm management system. He is a qualified Control, Safety and Systems Engineer with a background in Automation, Control and Safety Instrumented Systems(SIS) across a range of Oil/Gas, Refineries and Petrochemical plants as well as Manufacturing and Railways for about 15 years. He also has experience in Process Safety, Functional Safety and Functional Security including qualitative and quantitative reliability analysis, RAMS engineering, systems modelling, risk mitigation and operations optimisation, HAZOP, HAZID, LOPA, SIL study and specification, Formal Safety Assessments, Design and Operations Performance Standard Development, Safety Barriers Condition Evaluation and Report, Cyber threat studies and Safety Case development. Title Human Reliability v.s. Functional Safety Abstract Considering Abnormal Situation Management (ASM) in light of the Functional Safety, Functional Security and Systems Engineering shows the importance and complexity of the systems engage in controlling and protecting the sociotechnical systems. This talk aims to study and develop a solution to rationalize and prioritize the abnormal events in particular alarms, to develop an intelligent advisory system for the operator to increase situational awareness and human reliability which result in better decision-making and leading to effective and efficient operations via improving alarm management system KPIs.

Sébastien Dupertuis is a senior application engineer at MathWorks Switzerland. He works in the area of design automation with a focus on signal processing and code generation technologies targeting heterogeneous embedded systems. Sébastien held software engineering-related positions for over five years at Institut d’Automatisation Industrielle as well as Swissvoice in Switzerland. At Swissvoice, he was in charge of developing the audio part and the automatic testing framework for DECT phones. Sébastien graduated as a telecommunication engineer from La Haute Ecole d' Ingénierie et de Gestion du Canton de Vaud and as a physicist from the University of Geneva. Title How to quickly detect the top security vulnerabilities in your software Abstract Recent news, e.g. on connected and autonomous systems have proven that embedded systems can improve everyone’s lives and enable new business models for the industry, e.g. via service-oriented architectures. Functional safety standards, like DO-178, IEC 61508, ISO 26262, IEC 62304 or EN 50128 traditionally impose requirements on development and verification processes for embedded systems helping to mitigate legal risks for their products in case of malfunction. Higher degrees of connectivity of modern embedded systems make them vulnerable to cyber security attacks, which may impact the safety of a system. Alike the errors, security vulnerabilities, exploited by attackers, may lead to widespread hazards, causing harm to humans and environments. In this presentation, we will discuss challenges that companies are facing when they are designing, implementing and verifying software components, as well as industry Insights about top security vulnerabilities. We provide examples how to quickly identify and prevent vulnerabilities by using model-based methods, automated code generation and sophisticated, but easy to apply static analysis methods. The presented approaches will help production software projects to comply with guidelines such as Cert-C, CWE or MISRA-C:2012 Amendment1. The demonstrated methods will help companies to fulfil requirements imposed e.g. by ISO 21434 and IEC 62443 that focus on automotive or industrial cyber security, to reduce their business risks by documenting the application of state-of-the-art methods with a high degree of automation.

Stefan David received his Dipl.-Ing. (BA) degree from the University of Cooperative education in Mannheim/Germany plus a B.Sc. from the Open University/UK in Information Technology. He is ISTQB-certified tester and after several years of experience in the area of software development and –test, he joined the MathWorks in 2007 where he started as application engineer responsible for functional safety systems. He currently leads a team of application engineers responsible for verification and validation using Model-Based Design techniques in the area of functional safety and security among industries such as Automotive, Aerospace & Defence, Industrial Automation and Medical Devices. Before joining The MathWorks, he worked for PolySpace Technologies for 4 years as consultant and trainer, as a freelancer and at the German Aerospace Center (DLR) in the area of communication systems. Title How to quickly detect the top security vulnerabilities in your software Abstract Recent news, e.g. on connected and autonomous systems have proven that embedded systems can improve everyone’s lives and enable new business models for the industry, e.g. via service-oriented architectures. Functional safety standards, like DO-178, IEC 61508, ISO 26262, IEC 62304 or EN 50128 traditionally impose requirements on development and verification processes for embedded systems helping to mitigate legal risks for their products in case of malfunction. Higher degrees of connectivity of modern embedded systems make them vulnerable to cyber security attacks, which may impact the safety of a system. Alike the errors, security vulnerabilities, exploited by attackers, may lead to widespread hazards, causing harm to humans and environments. In this presentation, we will discuss challenges that companies are facing when they are designing, implementing and verifying software components, as well as industry Insights about top security vulnerabilities. We provide examples how to quickly identify and prevent vulnerabilities by using model-based methods, automated code generation and sophisticated, but easy to apply static analysis methods. The presented approaches will help production software projects to comply with guidelines such as Cert-C, CWE or MISRA-C:2012 Amendment1. The demonstrated methods will help companies to fulfil requirements imposed e.g. by ISO 21434 and IEC 62443 that focus on automotive or industrial cyber security, to reduce their business risks by documenting the application of state-of-the-art methods with a high degree of automation.

Since 2017 Managing Director of the xenthics Group Since 2015 System/Software Consultant at Contrass with focus on DO-178C and ISO26262, Part 6 – development of safety critical software. 2012 – 2015 Senior Safety Consultant at IABG mbH (Ottobrunn) in Aerospace and Automotive by using of the Standards DO-178C and ISO26262. 2008 – 2012 Senior Airworthiness Program Manager at the Eurofighter GmbH in Hallbergmoos. Supporting as interface between Program Management Level, Customer and Supplier with the focus to review and the assessment of the Eurofighter Supplier Aircraft documentation for the Industrial Production Aircrafts. 2005 – 2008 Quality Assurance Manager for the Eurofighter- and A400 Program with focus to the lead program reviews, internal Audits and as interface to Airbus Quality Management in Toulouse. 2002 – 2005 Supporting as well preparation of the A400M TMLLF Program - DO-178C planning documentation as PSAC, SDP etc. 2001 – 2002 Team leader of the software testing and Top Level Design Reviews at BAE Systems (Rochester, England) for the Eurofighter Program with focus on the Flight Control Computer. 1999 – 2001 Supporting of the Flight Control Computer and Initial Measurement Unit software development as IV&V assurance engineer. 1998 – 1999 Software development engineering for generation of a customer Website by using of HTML and SQL at Oracle 8 database 1994 – 1998 Diploma at the technical college in Lüneburg as automation engineering with focus on “Methods of System-/Software development”. Title Challenges and solutions in creating safety-related development- and company documents following industry specific safety engineering processes Abstract The creation of documents becomes more and more complex and extensive for companies. During product development (e.g. system, Hardware and Software), guidelines, standards, laws and contracts must be observed, which influence the scope and complexity of the documents to be created. Contracts, offers and invoices require more and more attention during the creation to ensure that all necessary information is legally secure. Therefore, a thorough understanding of the documentation processes in all areas of a company is required. xenthics looks for solutions that arise when creating complex documents to answer the following questions: - What are the biggest time-wasters during document creation? - Why does the release of the document take so long and what are the stoppers? - How to show evidence the document is conform to the required guidelines and standards? - What is the approach to speed up the document creating process? Answers to these and other questions are solved and implemented in the software solution of xenthics, which supports originators every day in the creating of their documents.

Thomas Probst is an economist and lawyer. In Switzerland, he has taught law at the Universities of St. Gallen, Basel, Neuchâtel and, since 2006, at the University of Fribourg. His areas of specialisation include the Law of Obligations, Torts, Contracts, European Private Law, Consumer Law, Sports Law, Data Protection Law and the Law of New Technologies (e.g. ADAS, Blockchain). Title Safety and Integrated Mobility: Automated Driving from a Legal Perspective Abstract The evolution of car driving is in full swing and will undergo major changes in the coming years and decades. While it is not yet clear which concept of individual mobility, which technological approach and which business model will ultimately be successful in the ongoing competitive race between car manufacturers and IT-companies, it is more than clear that highly and fully automated cars raise a host of legal questions. This presentation will provide an overview of legal issues and will discuss some of them in more detail.

After his studies in computer science at the University of Kaiserslautern (Germany), Mr. Rüdiger Lunde worked 8 years as a software developer and architect at R.O.S.E-Informatik GmbH in Heidenheim. He was responsible for the development of the diagnostic engine of the model-based diagnosis tool Rodon. In 2006, he obtained his Ph.D. at the University of Hamburg. Since 2006, he is a professor at the Ulm University of Applied Sciences where he teaches in the areas of software engineering and intelligent systems. Since 2013 he leads a research group on model-based safety analysis. Smartiflow - a model-based approach to automated safety analysis in very early stages of systems development. ABSTRACT SmartIflow is a new modeling language for automated safety analysis which is targeted to early stages of the product development. It describes components as finite state machines, covers nominal as well as failure behavior, and supports compositional modeling with reusable component type libraries. Based on an initial implementation, it was shown early on that the language, together with the model-checking techniques used, has great potential in the automation of reliability analyses. But the road to practical applicability in a productive environment is long. This talk reports on recent progress with an emphasis on theoretical fundamentals, software modularization, and FMEA generation. Finally, current challenges are discussed.

Prof. Dr. Hans Tschürtz has gained technical experience within more than 20 years in the private industry. This includes activities as a development engineer and project manager in big multi-site-projects. He is currently responsible for leading the Vienna Institute for Safety and Systems Engineering and the master study program Safety and Systems Engineering on the University of Applied Sciences FH Campus Wien. He is graduated engineer in the field of technical-science and certified as a senior project manager (ipma level B). Abstract Automated driving is becoming increasingly attractive, not only on the road, but also in the rail traffic. In the closed and protected (mostly urban) area, referred as "Closed Track" area, automated driving has already been implemented (subways, metro lines, airport railways). In the so-called, "Open Track” area the situation is more complex. Unknown situations and/or different weather and lighting conditions can put an automated vehicle uncontrolled, leading to new, formerly non-existing type of accidents. Due to the planned automation of the operation, Inherent System Safety is paramount, which encompasses safety (operational safety such as e.g. the detection of obstacles) as well as security (protection against attacks from the outside, e.g. hacking). This forms the basis for the required technologies

04/2018 – today Systems Safety Engineer at BERNS Engineers GmbH - Failure Mode and Effects Analysis (FMEA) moderation in the automotive industry - Functional Hazard Assessment (FHA) for a system of systems in the aviation industry - Application of ISO 13849 on a test facility for gas turbine compressors - Concept creation for validation of a GNSS positioning solution in the automotive industry according to ASIL B - Assessment and adaptation of ESA calls for bids (ESA EMITS) and acquisition of cooperation partners - Editing of training documentation for reliability calculation in line with the industry standard (MIL-HDBK-217F, FIDES, IEC 62380) 11/2017 – 03/2018 Student trainee at BERNS Engineers GmbH - Editing of training documentation for reliability calculation in line with the industry standard (MIL-HDBK-217F, FIDES, IEC 62380) - Comparison and assessment of reliability databases and methods - Assessment and adaptation of ESA calls for bids (ESA EMITS) and acquisition of cooperation partners 04/2015 – 03/2018 Master student at Technical University of Munich - Studies in mechanical engineering with in-depth study in "‘Development and Construction"’ - Master thesis with topic "‘Reliability Prediction of Student-Built CubeSats in Early Project Phases"’ – Analysis and comparison of established methods of reliability prediction in the automotive and aviation industry – GAP-Analysis for usage in development of CubeSats – Development of a method to increase reliability predictions in student-lead CubeSat projects - Staff member at the CubeSat project "‘MOVE-II"’ at the astronautics chair – Team leader of the "‘Assembly Integration and Test"’ (AIT) subsystem – Development and execution of test for the CubeSat – Development of integration procedures – CubeSat assembly - Lectures about product development and FMEA 10/2011 – 03/2015 Bachelor student at University of Applied Sciences in Saarbrücken - Bachelor thesis with topic "‘FMEA at the semi automatic assembly line for the coordinate measuring device OPTIV-Performance 443 DualZ"’ – Analysis and assessment of employee security and product quality – Deviation of optimization potential and – Development of work processes - Lectures about product development and FMEA 04/2015 – 09/2015 Student trainee at German Aerospace Center Oberpfaffenhofen - Engineering and design of a test bed for life span determination of a engine-transmission-unit of a highly integrated lunar rover 02/2011 – 09/2011 Mechatronic technician at Hexagon Metrology Vision GmbH • Assembly of coordinate measuring devices • Development of assembly instructions for coordinate measuring devices • Development of control cabinets Abstract How “New Space” Approaches Will Influence Future Mobility and Automated/Autonomous Traffic Systems Each of us already heard the term “New Space” at least once. But what is “New Space”? And how can we profit from this approach? The presentation will give an insight into “New Space”, associated development of technologies and its challenges, but also its beneficial impacts on integrated mobility applications of tomorrow in Automotive, Railways and Aviation.

Bill Andrew received his Bachelor of Engineering degree with honours in aerospace engineering from the University or Hertfordshire, in 1998. From 1999 to 2001, Andrew Bill was a Control Systems Engineer for Dowty Propellers, working on the Bombardier Dash 8-Q400 propeller control system. From 2001, he has been a Systems Engineer at Airbus, Filton (UK), and has been involved in the development of the Braking and Steering systems for the Airbus A380. In 2004 Andrew joined the Landing Gear Monitoring Systems team at Airbus as an Engineering Specialist. Andrew was involved in the development of the Brake Temperature Monitoring System, Oleo Pressure Monitoring System, Tire Pressure Indicating System and Brake Cooling Fan Control systems for the Airbus A380 and Airbus A350 aircraft. Since 2014, Andrew has been a Systems Specialist for the Landing Gear Research and Technology Department, working on wireless sensing technologies and future health monitoring and landing systems. Abstract Overcoming the challenges associated with security and certification aspects of wirelessly monitoring aircraft tire pressures With the increase in fleet sizes, trend for on-condition maintenance only, increased regulatory rigour, and demand for simplicity, the burden of tire pressure checks must be reduced. Wireless connectivity is the enabling technology to achieve this objective. A collaboration between Airbus in the UK and Meggitt in Switzerland led to a wireless tire pressure indicating system. In this presentation Andrew Bill will introduce the need for regular tire pressure checks and the associated safety aspects vs maintenance burden that has led to the need for this innovative monitoring solution. Andrew Bill will then explain some of the major challenges relating to security and certification aspects associated with wirelessly sensing and displaying aircraft tyre pressures, including finding the right balance between meeting the needs of the customer, human factors, satisfying the certification authorities and balancing expectations whilst preventing overly complex system design and human interaction.

Eckehard Schnieder (born in 1949) graduated in electrical engineering at Technische Universität Braunschweig (Germany) in 1972. Until 1979 he was research associate at the same university and received his Dr-.Ing. From 1979 until 1989 he worked with Siemen's Railway Signalling, where he was head of the development of the automatic operation control system for the German maglev as well as for the Siemens people mover. From 1989 to 2014 he was a full professor at Technische Universität Braunschweig where he headed the renowned Institute of Traffic Safety and Automation Engineering. He directed the first formal modeling of the European Train Control System (ETCS) and did basic research on satellite-based train localisation. Since 1998 he acts as licensed assessor of the German Railway Authority. He is visiting professor of European and Asian Universities and received three honorary doctorates and several international awards. Since 2014 Prof. Schnieder acts as an independent assessor and consultant (See also https://www.iva.ing.tu-bs.de/?iT=5_797&id=1&newNLS=en). Title Derivation of Safety, Security and Availability Targets for Satellite based Train Localisation Abstract With the availability of powerful satellite positioning systems, their use for train tracking in rail transportation is getting closer and closer while promising multiple benefits. For safety-related localisation tasks, their realization must meet several requirements, resulting as well from advanced operational behavior, as accuracy and from legal requirements as dependability including safety, security and availability. In this context the terminology of dependability properties will be outlined, also in order to be not confused by the different terminology of the aerospace and railway domains. As railway operation must guarantee a certain safety level, e.g. as safe or better than actual transportation, safety design targets must be derived. For this purpose, special approaches have been applied, to fulfil safe operations for a lot of use cases for railway operational processes and tasks. Since the availability of satellite signals in rail transport is not always guaranteed , e.g. due to shadowing in tunnels or stations, or subject to unwanted or intended disturbances, e.g. through multipath propagation or jamming and spoofing, a vehicle-based location can be achieved only in conjunction with other sensors and a map reference to provide a high level of dependability. This results in a functional architecture of a redundant multi-sensor system in which the impermissible deviations can be detected by fault detections, but the parameterization of the thresholds are related to the required accuracy, safety and availability values. The analytical context and its quantification for fulfilling a given safety integrity level (SIL, THR) by the m-of-n redundancy concept of the multi-sensor configuration and the component parameter design will be presented. In addition, the necessary procedures for determining the required features and parameters of reliability (RAMS) as well as the accuracy of the satellite receiver are explained.

- Managing Director of the FSQ Experts GmbH (since 01.2019) - Head of “Center of Competence Safety” at IABG mbH (11.2016 to 12.2018) - Head of Safety Department at ACENTISS GmbH (01.2014 to 10.2016) - Safety Engineer (01.2009 – 12.2013) - Scientific Assistant for Applied Mathematics at University of Koblenz-Landau (01.2013 to 12.2014) - Dipl.-Ing. Business and Engineering (“Wirtschaftsingenieur” at University of Applied Science Rosenheim (03.2005 to 12.2008) Focus of expertise Safety-Critical Systems and System Safety (e.g. ISO26262, IEC61508) Process Consulting, Agile Development and V-Modell XT Multi-Project-Management and Project Coordination Title SafeSCRUM - an agile Software Development Approach for Safety Critical Systems Abstract Functional safety and quality standards like ISO26262 and AutomotiveSPICE (ASPICE) assume a dedicated amount of documentation and well-defined processes for the product safety certification including risk analysis, change control and traceability. Therefore, one could get the impression, that the speed of change has to be lower in safety related projects, making them less flexible with respect to changing requirements from customers and markets. Insufficient understanding and hence inappropriate application of agile software development have led to the widespread belief: agile software development approaches cannot be applied on safety critical systems. This presentation will refute this belief and to proof that SafeSCRUM can be used. If appropriately applied, SafeSCRUM will not only render the specific SCRUM advantages like higher development and speed, but also achieve the following goals: 1. Systematization of development processes 2. Chain of evidences for certification created “on the fly” 3. Improvement of product safety through safety analyses iterations

Alexander is one of the two co-founders Embotech and the company’s CTO. During his PhD at ETH Zurich, he worked on efficient software and algorithms for solving optimal decision-making problems. The key innovation came from a code generation system that allowed complex numerical algorithms that were commonly used for solving mathematical problems offline to be implemented on embedded computers for realtime applications. Today this is Embotech’s core solution called FORCES PRO. In addition to his PhD, Alexander holds a diploma in Electrical Engineering from RWTH Aachen, and has been a recipient of the German National Academic Foundation scholarship. Title Motion Planning at the physical limits Abstract A vehicle’s physical capabilities are crucial for the feasibility and smoothness of any maneuver. Traditional motion planning methods for AD neglect most of the physics, being conservative or requiring advanced low-level vehicle controls that are often not present or are prohibitively expensive. We demonstrate physics-based motion planning technology, using numerical optimization, to calculate smooth and safe trajectories which can be easily followed by standard low-level vehicle controllers. Based on recent advances in embedded optimization technology, we capture most of the relevant vehicle dynamics while driving on a highway or on rural roads, significantly extending the performance envelope of autonomous cars.

2015 – Now: Research Professor ‘Functional Safety’ at University of Applied Sciences Kempten and Technology Center in Kaufbeuren 1998 – 2015: Head of Department ‘Functional Safety and Testing’, vice manager R&D at Sensor-Technik Wiedemann GmbH in Kaufbeuren 1997 – 1998: Technical manager at IMR GmbH in Heilbronn, Germany, coordination of R&D, production and service of measuring computers for flue gas analysis and gas warning systems for electrochemical and IR sensors 1996 – 1997: R&D manager at Wenger Systeme + Service GmbH in Dießen, Germany, development of measuring computers for pollutant analysis of gases with optoacoustic sensors 1995 – 1996: Subject specialist for constructional fire protection at Deutsches Institut für Normung DIN in Berlin 1990 – 1995: Doctorate thesis at Technische Universität München, institute for physical and theoretical chemistry, topic in molecular spectroscopy with synchrotron radiation 1983 – 1989: Diploma in technical physics at Technische Universität München with focus on semiconductor and energy technology Title Objective Workload Evaluation of Lane Keeping Assistance Systems using Physiological Signals and Driving Performance Abstract The study investigates the mental workload associated with driving in automated vehicles. Particularly, an experiment was carried out with 21 participants driving with a Lane Keeping Assistance System (LKAS) in three real-world scenarios. The mental workload was measured with objective metrics such as heart rate (HR) and electrodermal activity, whereas the driving behavior was evaluated with performance metrics like steering reversal rate, lateral position and steering effort. The result suggested that LKAS has reduced physical workload in the steering task. However, the steering behavior of LKAS was not ideal such that the steering reversal rate was significantly higher than driving manually. This additional mental effort was also observed in the physiological metrics. Firstly, the number of skin conductance response was significantly higher driving with LKAS than manually driving. Statistically, HR was not reported significantly different between LKAS settings but only between scenarios. Nevertheless, an acclimatization effect of HR was found in the group where drivers first drove with LKAS in the first lap. Yet this effect was not found in the group with reversed driving order. Overall, the results suggested that LKAS-induced mental workload was evident and LKAS improvements are needed.

Name: Klaus-Dieter Becker Age: 61 Profession: Dipl.-Ing. Becker Professional Experience Several years at MAN Roland 1992 Technical inspector Professional Association Printing and Paper Converting Industry Wiesbaden, Germany Member of the test and certification body of BGETEM (Berufsgenossenschaft BGETEM) Inspector Member of Expert committee Printing and Paper Converting Testing and Certification body from 2003 Convenor of CEN/TC 114/ISO 199/JWG 8 “Safe control systems” and Collaboration in several national and international Standard Committees Chairman german mirror of safe control systems head of electrical engineering of BGETEM (Wiesbaden) Convenor EN ISO 13849, parts 1 and 2 Convenor EN ISO 13850 and ENISO 13851 from 2011 Chairman of the project group „control devices” of the ISSA-Section Machine and System Safety 01.03.2016 head of Expert commitee energy, textile electrical and media products sectors Abstract Integration of safety aspects in the Design of safety related parts in the control system in machines under consideration of the EN ISO 13849-2 The presentation covers the standard EN ISO 13849-1: In the valid standard EN ISO 13849-1 the required risk reduction of the safety related control system has to be determined as the result of the risk assessment. The necessary risk reduction will be described through the quantifiable aspects e.g. the reliability of the components, architecture of the control system, the diagnostic of the components and the consideration of the common cause failure for redundant systems. The standards EN ISO 13849-1/IEC 62061 has additional requirements for non-quantifiable aspects e.g. prevention of systematic faults. In modern control systems the application software and embedded software are more and more responsible for the necessary risk reduction. The software is not quantifiable. As the result of systematic fault in the design/modification of the software a fault can lead to loss of the safety function.