Software Hazard Ana lysis Model of process Process is modeled using state variables Traffic Density Schedule Slot [1...90] LoW Available Average Aircraft scheduled High Blocked Unknown Unknow Values of state variables given by AND/OR tables Software Environment Sensor Measured variable 1 Measured Variable 2 Component SUPERVISORY: INFERRED SYSTEM OPERATING MODES Control CONTROL INFERRED SYSTEM STATE Command Controlled Supervisor MODES Devicec ✢✡☎✣✞✡☎✆✞✙☎✕✔✥✧✦✩✰✪✦ ￾✂✙☎✚✠✛✜✍☎✑✡✔☞✜✍☎✏✞✍☎✑✒✔✓✂✕☎✍☎✗✝✞✆✞✘✆ Model of Process Process is modeled using state variables Average Low Unknown High Traffic Density Schedule Slot [1...90] Unknown Blocked Aircraft Scheduled Available Values of state variables given by AND/OR tables c ✢✡☎✣✞✡☎✆✞✙☎✕✔✥✧✦✩✰☎✫ ￾✂✙☎✚✠✛✜✍☎✑✡✔☞✜✍☎✏✞✍☎✑✒✔✓✂✕☎✍☎✗✝✞✆✞✘✆ Component MODE SUPERVISORY CONTROL INFERRED SYSTEM OPERATING MODES MODES Measured Variable Command Control Display Output Control Input Controlled Device Measured Variable 1 Measured Variable 2 Supervisor (Feedback) Sensor Environment INFERRED SYSTEM STATE