STPA is a widely recognised risk analysis method by MIT whose growing influence is now reaching standards in, e.g., Aeronautics (SAE AIR6913), Automotive (SAE J3187) and others. It originally focuses on Safety but it can be adapted to Cybersecurity or any other concern where the notion of control is key. It contributes to consolidating the architecture of solutions by analysing how systems and/or humans collectively behave in order to enforce certain properties.
This project provides experimental tool support for STPA. It enables system architects, designers, domain experts, safety or risk analysis experts to perform STPA analyses in a model-based fashion, either standalone or in combination with Capella/Arcadia system architecture modeling. Albeit experimental, it has been successfully used in several real-world projects.
A user guide is available. Familiarity with Capella or other Sirius-based modeling tools lowers the learning curve.
Installation instructions are provided as part of the Capella documentation. To sum up, download the appropriate archive according to your version of Capella.
- Either as a dropin (for example here for Capella 6.1). To install, simply unzip it in the capella/dropins folder of your Capella installation.
- Or as an update site (for example here for Capella 6.1), which provides more compatibility guarantees if your installation is more than just a simple, raw Capella or if you are unsure about its version. To install, follow the dedicated instructions.