submission_ready_for_paper copy, at uni 2morrow

fmmd_concept/System_safety_2011/submission.tex

@@ -14,7 +14,7 @@
 
 \newboolean{paper}
 \setboolean{paper}{true} % boolvar=true or false
-\newcommand{\oc}{\ensuremath{^{o}{C}}}
+\newcommand{\oc}{\ensuremath{^{o}{C}}}possible for
 \newcommand{\adctw}{{${\mathcal{ADC}}_{12}$}}
 \newcommand{\adcten}{{${\mathcal{ADC}}_{10}$}}
 \newcommand{\ohms}[1]{\ensuremath{#1\Omega}}
@@ -29,7 +29,7 @@
 \newcommand{\pin}{\ensuremath{\stackrel{pi}{\longleftrightarrow}}}
 %\newcommand{\pic}{\em pure~intersection~chain}
 \newcommand{\pic}{\em pair-wise~intersection~chain}
-\newcommand{\wrt}{\em with~respect~to}
+\newcommand{\wrt}{\em with~respect~to}possible for
 \newcommand{\abslevel}{\ensuremath{\Psi}}
 \newcommand{\fmmdgloss}{\glossary{name={FMMD},description={Failure Mode Modular De-Composition, a bottom-up methodolgy for incrementally building failure mode models, using a procedure taking functional groups of components and creating derived components representing them, and in turn using the derived components to create higher level functional groups, and so on, that are used to build a failure mode model of a SYSTEM}}}
 \newcommand{\fmodegloss}{\glossary{name={failure mode},description={The way in which a failure occurs. A component or sub-system may fail in a number of ways, and each of these is a 
@@ -61,7 +61,7 @@ failure mode of the component or sub-system}}}
 
 \abstract{
 The certification process of safety critical products for European and 
-other international standards often involve environmental stress, 
+other international standards often demand environmental stress, 
 endurance and Electro Magnetic Compatibility (EMC) testing. Theoretical, or 'static testing',
 is often also required. In general static testing will reveal modifications that must be made to
 improve the product safety, or identify theoretical weaknesses in the design.
@@ -150,7 +150,7 @@ component failure will typically affect the sub-system
 it is part of, and create a failure effect at the SYSTEM level.}
 will be $(N-1) \times N \times K$.%, in effect a very large set cross product.
 If $E$ is the number of environmental conditions to consider
-in a system, and $A$ the number of applied states (or modes of the SYSTEM),
+in a system, and $A$ the number of applied/operational states (or modes of the SYSTEM),
 the job of the bottom-up analyst is presented with two
 additional %cross product 
 factors, 
@@ -212,7 +212,7 @@ for its results, such as  error causation trees.%, reliability and safety statis
 %graphical syntax (as opposed to a formal symbolic/mathematical text based language).
 %\item From the top down, the failure mode model should follow a logical de-composition of the functionality
 %to smaller and smaller functional groupings \cite{maikowski}.
-\item Be possible for multiple (simultaneous) failure modes to be modelled.% from the base component level up.
+\item Be able to model multiple (simultaneous) failure modes.% from the base component level up.
 \end{itemize}
 }
 
@@ -251,7 +251,7 @@ for its results, such as  error causation trees.%, reliability and safety statis
 % 
 % Components have sets of failure modes associated with them.
 % Failure modes for common components may be found in 
-% the literature~\cite{fmd91},~\cite{mil1991}.
+% the literature~\cite{fmd91,mil1991}.
 % We can associate a component with its failure modes.
 % This is represented in UML in figure \ref{fig:component_concept}.
 % 
@@ -755,7 +755,9 @@ introducing test~cases where the conjunction of failure modes is considered.
 
 This new approach is called 
 Failure Mode Modular De-Composition (FMMD) and is designed 
-to be a superset of the current four approaches, that is to say, 
+to be a %superset 
+a more rigorous  and `data~complete' model than
+the current four approaches, that is to say, 
 from an FMMD model, we should be able to 
 derive models that the other four methodologies would have been 
 able to create. As this approach is modular, many of the results of