Analysis of Safety-Critical Cloud Architectures with Multi-Trajectory Simulation

Dynamic safety-critical systems require model-based techniques and tools for their systems design. The paper presents a stochastic Petri net model of an industrial safetycritical cloud server architecture for train control. Its reliability has to be evaluated to assess tradeoffs in architecture and level of fault tolerance. Simulation methods are too slow for such rare-event problems, while numerical analysis techniques suffer from the state-space explosion problem. The paper extends a recently developed multi-trajectory simulation algorithm combining elements of simulation and numerical analysis such that it increases the accuracy of rare-event simulations within a given computation time budget. Simulation experiments have been carried out with a prototype tool.