[2] [2] SAE.ARP4761 guidelines and methods for conducting the safety assessment process on civil airborne systems[S］.[S.l.］:SAE International,1996.

[3] [3] KWIATKOWSKA M,NORMAN G,PARKER D.Advances and challenges of probabilistic model checking[J］.Communication,Control,& Computing,2010,111(2):1691-1698.

[4] [4] NORMAN G,PARKER D.Quantitative verification:formal guarantees for timeliness,reliability and performance[R］.London:London Mathematical Society and Smith Institute, 2014.

[5] [5] KWIATKOWSKA M,NORMAN G,PARKER D.PRISM:probabilistic model checking for performance and reliability analysis[J］.ACM Sigmetrics Performance Evaluation Review,2009,36(4):40-45.

[6] [6] ELMQVIST J,NADJM-TEHRANI S.Formal support for quantitative analysis of residual risks in safety-critical systems[C］//HASE′08 Proceedings of the 11th IEEE High Assurance Systems Engineering Symposium,Washing-ton: IEEE Computer Society,2008:154-164.

[11] [11] SAE.ARP4754A guidelines for development of civil aircraft and systems[S］.[S.l.］:SAE International,2010.

[12] [12] GE X C,PAIGE R F,MCDERMID J A.Analysing system failure behaviours with PRISM[C］//Fourth International Conference on Secure Software Integration and Reliability Improvement Companion,IEEE Computer Society,2010:130-136.

[13] [13] YAN S,ZHANG H,ZHANG Y.Reliability prediction of a hydraulic system with probabilistic model checking[C］//International Conference on Reliability Systems Engineering,IEEE,2016:1-7.