Esta Tese apresenta uma contribuição para avaliação da comunicação digital na operação de veículos aéreos não tripulados (VANT) no ambiente aeronáutico. A comunicação digital aeronáutica relaciona-se diretamente ao nível de segurança crítica desejado para o controle do fluxo de tráfego aéreo, por parte de autoridades e de órgãos normativos, os quais possuem como objetivo tornar a comunicação uniforme para todos os continentes. Diversas são as discussões acerca do nível de segurança crítica que a comunicação digital entre VANT e controle em terra possa exibir, sempre buscando redução da exposição a riscos inerentes à operação desse tipo de veículo. Nesse contexto, a proposta desta Tese é avaliar a segurança na comunicação digital, por meio do uso de injeção de falhas, para operações de veículos aéreos não tripulados. Este trabalho descreve a importância de analisar as interferências causadas por falhas na comunicação digital, relacionadas ao envio de mensagens entre o órgão de controle e a aeronave não tripulada. Também são definidos quais os tipos de falhas que causam um maior impacto na comunicação, bem como quais os parâmetros que devem ser utilizados para manipulação das variáveis de falhas na comunicação. Para atender a avaliação proposta, foi utilizado o ambiente simulado que reúne as características do ambiente aeronáutico, denominado PipE-SEC (Plataforma Integrada para Ensaios de Sistemas Embarcados Críticos), bem como o protocolo CPDLC (Controller-Pilot Data Link Communications) para troca de mensagens digitais. / This thesis presents a contribution to the evaluation of digital communication in the operation of unmanned aerial vehicles (UAV) in the aeronautical environment. Aeronautical digital communication relates directly to the critical safety level required for controlling the air traffic flow by authorities and regulatory agencies, which are aimed at making communication uniform for all continents. There are several discussions about the safety critical level that digital communication between UAVs and ground control can display, always seeking to reduce exposure to risks inherent in the operation of such vehicles. In this context, the proposal of this thesis is to evaluate the safety in digital communication, through the use of fault injection for operations of UAV. This work describes the importance of analyzing the interference caused by faults in digital communication related to sending messages between the control agency and the UAV. There are also defined what types of faults cause a greater impact on communication as well as which parameters should be used to simulate communication faults. To answer the proposed evaluation, we used the simulated environment that combines the features of the aeronautical environment, called PIpE-SEC (Integrated Platform for Test Critical Embedded Systems), as well as the protocol CPDLC (Controller-Pilot Data Link Communications) to exchange digital messages.

Esta Tese apresenta uma contribuição para avaliação da comunicação digital na operação de veículos aéreos não tripulados (VANT) no ambiente aeronáutico. A comunicação digital aeronáutica relaciona-se diretamente ao nível de segurança crítica desejado para o controle do fluxo de tráfego aéreo, por parte de autoridades e de órgãos normativos, os quais possuem como objetivo tornar a comunicação uniforme para todos os continentes. Diversas são as discussões acerca do nível de segurança crítica que a comunicação digital entre VANT e controle em terra possa exibir, sempre buscando redução da exposição a riscos inerentes à operação desse tipo de veículo. Nesse contexto, a proposta desta Tese é avaliar a segurança na comunicação digital, por meio do uso de injeção de falhas, para operações de veículos aéreos não tripulados. Este trabalho descreve a importância de analisar as interferências causadas por falhas na comunicação digital, relacionadas ao envio de mensagens entre o órgão de controle e a aeronave não tripulada. Também são definidos quais os tipos de falhas que causam um maior impacto na comunicação, bem como quais os parâmetros que devem ser utilizados para manipulação das variáveis de falhas na comunicação. Para atender a avaliação proposta, foi utilizado o ambiente simulado que reúne as características do ambiente aeronáutico, denominado PipE-SEC (Plataforma Integrada para Ensaios de Sistemas Embarcados Críticos), bem como o protocolo CPDLC (Controller-Pilot Data Link Communications) para troca de mensagens digitais. / This thesis presents a contribution to the evaluation of digital communication in the operation of unmanned aerial vehicles (UAV) in the aeronautical environment. Aeronautical digital communication relates directly to the critical safety level required for controlling the air traffic flow by authorities and regulatory agencies, which are aimed at making communication uniform for all continents. There are several discussions about the safety critical level that digital communication between UAVs and ground control can display, always seeking to reduce exposure to risks inherent in the operation of such vehicles. In this context, the proposal of this thesis is to evaluate the safety in digital communication, through the use of fault injection for operations of UAV. This work describes the importance of analyzing the interference caused by faults in digital communication related to sending messages between the control agency and the UAV. There are also defined what types of faults cause a greater impact on communication as well as which parameters should be used to simulate communication faults. To answer the proposed evaluation, we used the simulated environment that combines the features of the aeronautical environment, called PIpE-SEC (Integrated Platform for Test Critical Embedded Systems), as well as the protocol CPDLC (Controller-Pilot Data Link Communications) to exchange digital messages.

Water distribution systems are critical infrastructure systems enabling the social and economic welfare of a community. While normal failures are expected and repaired quickly, low-probability and high consequence disruptive events have potential to cause severe damage to the infrastructure and significantly reduce their performance or even stop their function altogether. Resilient infrastructure is a necessary component towards achieving resilient and sustainable communities. Resilience concepts allow improved decision making in relation with risk assessment and management in water utilities. However, in order to operationalize infrastructure resilience concepts, it is fundamental to develop practical resilience assessment methods such as the methodology and tool proposed in this research, named Effective Resilience Assessment Methodology for Utilities (ERASMUS). ERASMUS utilizes a stochastic simulation model to evaluate the probability of resilient response from a water distribution system in case of disruption. This methodology utilizes a parametric concept of resilience, in which a resilient infrastructure system is defined in terms of a set of performance parameters compared with their socially acceptable values under a variety of disruptive events. The methodology is applied to two actual water distribution networks in the East and West coasts of the US. / Ph. D.

Critical Infrastructure Systems (CISs) are key for providing essential services and managing critical resources. The failure of one CIS can result in severe consequences on national security, health & safety, the environment, social well-being, and the economy. However, CISs are inherently complex, operating as systems-of-systems with dynamic, non-linear, and uncertain operation conditions, all geared towards fulfilling complex operational objectives. The complexity of both system architecture and operational objectives contributes to challenges in comprehending system-level behavior under normal and disruptive conditions. CISs are also highly exposed to multi-hazard environments characterized by probabilistic behaviors that can impact one or more system components—leading to diverse system failure modes. Understanding the dynamic interaction between hazards and the system response in such environments adds another layer of complexity to CISs safety. Addressing such complexity is crucial and it necessitates thorough investigations to ensure the continuous and reliable operation of CISs. Accordingly, the main objective of this thesis is to develop dynamic resilience quantification approaches for CISs in multi-hazard environments, considering the probabilistic behavior of both the hazard and the system. Given that dam infrastructure is one of the most significant CISs, this thesis employs an actual dam system as a demonstration application for the developed models. Nonetheless, it should be emphasized that the thesis focuses on the generalizability of the developed model to the CISs rather than the specificities related to dam systems, which are adopted herein merely to show the utility of the developed models to complex CISs. Specifically, this thesis first employs a meta-research approach (Chapter 2), using text analytics, to conduct a quantitative and qualitative review of extensive prior research focused on CISs operational safety, considering dam and reservoir systems as one of the key CISs. Such meta-research aims to unveil latent topics in the field and identify key opportunities for future research, particularly in addressing limitations associated with existing risk-based and resilience-based safety assessment approaches for CISs. To overcome such limitations, this thesis (Chapter 3) subsequently developed a coupled Continuous-Time Markov Chain and Bayesian network, facilitating the dynamic quantification of CISs failure risk (propagation of the system's probability of failure with time), considering the temporal variation of uncertainties in system components during operations. Starting from where the risk-based assessment ends (the immediate response of the system at the hazard realizations), resilience-based assessment focuses more on the dynamic system functionality gain/reduction and, subsequently, the system deterioration and recovery rates following hazard realizations. Accordingly, this thesis (Chapter 4) presents a resilience-centric System Dynamics simulation modeling approach capable of representing CISs components, estimating their dynamic system performance, and subsequent dynamic resilience (propagation of the system resilience with time). Such a modeling approach proposes a combinatorial procedure for generating multi-hazard scenarios, encompassing both natural and anthropogenic hazards, where one primary hazard can trigger one or more subsequent hazards. As a result, the developed models can investigate system operations under both single and multi-hazard environments. Furthermore, the coupling between System Dynamics and Monte Carlo simulations (Chapter 5) enables the model to seamlessly incorporate the probabilistic behaviors of both multi-hazard and system responses. The developed approaches can provide the decision-makers with a more detailed system representation that includes probabilistic dynamic system components with multi-operational objectives under probabilistic multi-hazard environments (Chapter 6). Moreover, the developed models can introduce more realistic evaluations for risk-adaptive and mitigation plans in real-time, contributing to more efficient safety assessment plans for the CISs. / Thesis / Doctor of Philosophy (PhD) / Critical infrastructure systems (CISs) play pivotal roles in delivering and supporting the essential needs of our daily lives. However, ensuring the safety of CISs poses layered challenges due to the complexity of their systems and operations, compounded by their susceptibility to multi-hazard environments, all with probabilistic behaviors. Recognizing the criticality and safety obstacles associated with CISs, this thesis introduces dynamics resilience quantification approaches for CISs safety based on a holistic system dynamics representation. The developed models are designed to enhance understanding of the system's performance under multi-hazard disruption conditions, considering the probabilistic behavior of both hazards and system response. Moreover, these models yield resilience-based metrics, allowing for the evaluation of the effectiveness of various risk mitigation plans, which would subsequently lead to more reliable safety assessment plans for CISs. Considering that dam infrastructure is a key CISs, this thesis focuses on the former as a demonstration application to show the developed models’ utility and their efficiency in devising resilience-guided assessment plans for CISs.