Skip to main content
Skip to article control options
No AccessFull-Length Paper

Hazard Analysis of Complex Spacecraft Using Systems-Theoretic Process Analysis

Published Online:

A new hazard analysis technique, called systems-theoretic process analysis, is capable of identifying potential hazardous design flaws, including software and system design errors and unsafe interactions among multiple system components. Detailed procedures for performing the hazard analysis were developed, and the feasibility and utility of using it on complex systems was demonstrated by applying it to the Japanese Aerospace Exploration Agency H-II Transfer Vehicle. In a comparison of the results of this new hazard analysis technique to those of the standard fault tree analysis used in the design and certification of the H-II Transfer Vehicle, systems-theoretic hazard analysis found all the hazardous scenarios identified in the fault tree analysis as well as additional causal factors that had not been identified by fault tree analysis.


  • [1] Report on the Loss of the Mars Polar Lander and Deep Space 2 Missions,” Jet Propulsion Laboratory Special Review Board, NASA Jet Propulsion Lab., California Inst. of Technology, 22 March 2000. Google Scholar

  • [2] Leveson N. G., “Role of Software in Spacecraft Accidents,” Journal of Spacecraft and Rockets, Vol. 41, No. 4, 2004, pp. 564–575. doi: JSCRAG 0022-4650 LinkGoogle Scholar

  • [3] Leveson N. G., “Software Challenges in Achieving Space Safety,” Journal of the British Interplanetary Society, Vol. 62, 2009, pp. 265–272. JBISAW 0007-084X Google Scholar

  • [4] Leveson N. G., Engineering a Safer World: Systems Thinking Applied to Safety, MIT Press, Cambridge, MA, Jan. 2012. CrossrefGoogle Scholar

  • [5] Pavlovich J. G., “Formal Report of Investigation of the 30 April 1999 Titan IV B/Centaur TC-14/Milstar-3 (B-32) Space Launch Mishap,” U.S. Air Force, 1999. Google Scholar

  • [6] HTV-1 Mission Press Kit, Japan Aerospace Exploration Agency, Tokyo, Sept. 2009. Google Scholar

  • [7] HTV 2 (KOUNOTORI 2) Mission Press Kit, Japan Aerospace Exploration Agency, Tokyo, Jan. 2011. Google Scholar

  • [8] Pereira S. J., Lee G. and Howard J., “A System-Theoretic Hazard Analysis Methodology for a Non-Advocate Safety Assessment of the Ballistic Missile Defense System,” AIAA Missile Sciences Conference, Monterey, CA, Nov. 2006. Google Scholar

  • [9] Leveson N. G., Fleming C. H., Spencer M. and Thomas J., “Safety Assessment of Complex, Software-Intensive Systems,” 2012 SAE Aerospace Electronics and Avionics System Conference, Society of Automotive Engineers, Paper  12AEAS-0006, Warrendale, PA, Oct. 2012. CrossrefGoogle Scholar

  • [10] Balgos V. A., “Systems Theoretic Application to Design for the Safety of Medical Devices,” M.S. Thesis, Massachusetts Inst. of Technology, Cambridge, MA, May 2012. Google Scholar

  • [11] Geddes B., “Comparison of Hazard Analysis Techniques,” Proceedings of the NRC/EPRI Meeting on Safety in Nuclear Power Plants, Nuclear Regulatory Commission and Electric Power Research Institute, Oct. 2012. Google Scholar

  • [12] Investigation Report,” Bundesstelle für Flugunfalluntersuchung, Rept.  AX00112/02, Braunschweig, Germany, May 2004. Google Scholar

  • [13] Weiss A. A., Dulac N., Chiesi S., Daouk M., Zipkin D. and Leveson N. G., “Engineering Spacecraft Mission Software Using a Model-Based and Safety-Driven Design Methodology,” Journal of Aerospace Computing, Information, and Communication, Vol. 3, No. 11, 2006, pp. 562–586. doi: 1542-9423 LinkGoogle Scholar