# Assessing the Risks of Airport Airside through the Fuzzy Logic-Based Failure Modes, Effect, and Criticality Analysis

Authors: Cheng-Min Feng; Chi-Chun Chung
Journal: Mathematical Problems in Engineering
 (2013)

---

## Abstract

To identify risk items, measure risk value objectively, and establish
risk assessment matrix of airports is the major task of airport safety. This
paper first extracts 14 risk items of airports from the International Civil
Aviation Organization (ICAO) aviation accidents database and then applies
Failure Modes, Effect and Criticality Analysis (FMECA) to define the decision
factors of probability, severity and detectability of airport risks. This paper
also designs a questionnaire and applies fuzzy logic to discover the
importance of decision factors, to find out the threshold value of Risk
Assessment Matrix, and to prioritize the airport risks. This paper uses Taiwan
Taoyuan International Airport as a case study to demonstrate the modeling
process and analyze the results.


---

## Body

## 1. Introduction

Any aviation accident may lead to unpredictable fatal losses. Statistically, almost 80% of aviation accidents occur at airports. Therefore, how to identify risk items, measure risk value objectively, and establish Risk Assessment Matrix of airports is a major task of airport safety management. Establishing a risk management mechanism for airports to monitor and improve these risks is the only solution to lower latent risks efficiently and to achieve the goal of airport safety. The probability of an aviation accident is very low, making it a difficult and complex task to properly explain, locate, and manage overall aviation safety [1]. Quantitative assessment of risk is particularly challenging in aviation safety domain where undesired events are extremely rare, and the causal factors are difficult to quantify and nonlinearly related [2]. Because of this incomplete information and data uncertainty, the traditional risk assessment ranks the level of risks through risk map based on the subjective experience and risk threshold value [3]. Since the subjective experience involves fuzzy linguistic variables to describe the severity, frequency of occurrence of the failure, and their fuzzy relationship, fuzzy logic based on the experience of experts is a good method to deal with risk assessment.Risk assessments are classified into 3 types of assessments: qualitative, quantitative, and quasi-quantitative. Failure Modes, Effect, and Criticality Analysis (FMECA) has been widely used as a quantitative tool to analyze the safety and reliability of products and processes in a wide range of industries. In 1960s, NASA concluded that it is a necessary procedure of space development project. In 1970s, it was applied extensively on defense science and technology of America and motor process [4, 5]. However, conventional FMECA techniques impose some limitations on problem solving such as the difficulty to evaluate linguistic variables and obtain the probability distributions as several failure modes occur simultaneously [6]. To overcome the drawbacks of FMECA, a number of approaches have been suggested in the literature [7]. One of them proposed fuzzy risk priority numbers (RPNs) to prioritize the failure modes [8]. However, conventional RPN methodology has not considered indirect relations between components [9], and it has the serious problem of measurement scales and loses some valued information, which experts have to provide [10]. The RPN analysis requires the risk factors of P (probability), S (severity), and D (detectability) for each failure mode. However, the weights for each risk need to be identified.An airport is a complex system, and each facility in the airport is an important component of the system. Any component influences the airport operation to some extent and may lead to aviation accidents if it fails. Michael [11] used the Flight Operations Risk Assessment System (FORAS) to provide a quantitative relative risk index representing an estimate of the cumulative effects of potential hazards on a single flight operation. Heinrich [12] classified aviation safety items as human, machine, mission, management, and environment. Edwards [13] classified them as livewire, hardware, software, and environment. Boeing Company classifies them as crew, airline flight operations, airplane design and performance, airplane maintenance, and weather information [14]. IATA Safety Report classifies them as human, organization, machine, environment, and insufficiency [11, 15]. Most of past research in aviation safety focuses on the safety of aircraft operation, traffic control system, crew management, aviation safety system of airlines organization and culture, and logistics issues such as apron operation and security check; less attention has been paid to airport risk management [16].The purpose of this paper is to improve the shortcomings of traditional RPN and the difficulty of identification of threshold value through incorporating the FMECA concept and fuzzy logic method with weightings of risk decision factor to measure the risk priority numbers (RPN). Compared with traditional methods of risk quantification or FMECA, this paper has the following advantages: (1) fuzzy inference provides more realistic and flexible way to reflect the real situation of the ambiguous airport airside risk with imprecise information; (2) weights of risk decision factors can be employed to set improvement strategies in the future; (3) ambiguous risk can be ranked and represented in terms of precise RPN effectively; (4) by determining the threshold value of risk assessment matrix more precisely, airport operator can explore unacceptable risk efficiently; (5) by designing FMECA table systematically and assessing RPN, we can explore the hot spot of airport airside risk occurrence efficiently. To illustrate the applicability, this paper uses Taiwan Taoyuan International Airport as a case study.


## 2. Identification of the Airport Airside Risks

Risk was traditionally defined as uncertainty or the chance of loss [17]. The uncertainty of event occurrence is subjective and indicates the existence of “whether or not,” “when,” “circumstance,” and “severity.” While the loss caused by the occurrence of an event is objective, it emphasizes the probability of loss [18]. The definition of risk may be different in research but it always emphasizes the expected value of combining probability and severity. Detecting risk helps control the occurrence of airport risks during operation. This paper introduces detectable concept on airport risk management and defines risk as expected value combining the probability, severity, and detectability.An airport system is classified into airside and landside. Airside consists of apron-gate area, taxiway system, holding pad, runway, and terminal airspace. Landside consists of terminal buildings and airport ground access system. Accidents on landside may lead to chaos of airport or nearby transportation, while accidents on airside cause not only aircraft damage of staff injury, but also flight schedule delay as well as indirect chaos. This paper focuses on airport airside risk.According to Annex 13 to the Convention on International Civil Aviation Organization (ICAO), an aviation accident is defined as an occurrence associated with the operation of an aircraft which takes place between the time any person boards the aircraft with the intention of flight and all such persons have disembarked, in which a person is fatally or seriously injured, the aircraft sustains damage or structural failure, or the aircraft is missing or is completely inaccessible [19]. Aviation safety is influenced by random factors from human, climate, or machinery and all these bring uncertainty. The identification of airport airside risk is the first step of airport risk analysis. Not much literature has identified the airport airside risks so far. This paper first extracts 6 airport airside-related flight operation procedures and their corresponding occurrence areas, based on 14 flight operation procedures and 28 categories of accidents in ICAO aviation accidents data base [20], and then identifies 14 airport airside-related risk items shown in Table 1. Each risk item along with its corresponding failure mode code and definition is shown in Table 2.Table 1
Airport airside risk items. Acronyms are defined in Table2.
Flight procedure
Risk occurrence area
Failure mode (risk item)
Standing (STD)
Apron-gate area
ADRM, F-NI, RAMP,  SEC
Holding pad
ADRM, ATM, F-NI, RAMP, SEC
Pushback/towing (PBT)
Apron-gate area
ADRM, ATM, F-NI, RAMP, ICE, LOC-G, SEC
Taxi (TXI)
Taxiway system
ADRM, ATM, F-NI, RAMP, GCOL, ICE, LOC-G, SEC
Holding pad
ADRM, ATM, F-NI, RAMP, ICE, LOC-G, SEC
Runway
ARC, ADRM, ATM, F-NI, RAMP, GCOL, ICE, LOC-G, RE, RI-A, RI-VAP, SEC
Takeoff (TOF)
Terminal airspace
ARC, ADRM, ATM, CFIT, F-NI, SEC
Approach (APR)
Terminal airspace
ADRM, ATM, CFIT, F-NI, SEC
Landing (LDG)
Taxiway system
ADRM, ATM, F-NI, RAMP, GCOL, ICE, LOC-G, SEC
Runway
ARC, ADRM, ATM, CFIT, F-NI, RAMP, GCOL, ICE, LOC-G, RE, RI-A, RI-VAP, SEC, USOSTable 2
Risk item, failure mode (FM) code, and definition.
Risk item
FM code
Definition
ARC
FM1
Abnormal runway contact (any landing or takeoff involving abnormal runway or landing surface contact)
ADRM
FM2
Aerodrome (aerodrome design, service, or functionality issues are evident)
ATM
FM3
Air traffic management (ATM) or communications/navigation/surveillance (CNS) service issues are evident
CFIT
FM4
Controlled flight into or toward terrain (in-flight collision or near collision with terrain, water, or obstacle without indication of loss of control)
F-NI
FM5
Fire/smoke (nonimpact) (fire or smoke in or on the aircraft, in flight, or on the ground, which is not the result of impact)
RAMP
FM6
Ground handling (occurrences during or from ground handling operations)
GCOL
FM7
Ground collision (collision while taxiing to or from a runway)
ICE
FM8
Icing (accumulation of snow, ice, or frost on aircraft surfaces that adversely affects aircraft control or performance)
LOC-G
FM9
Loss of control-ground (loss of aircraft control while the aircraft is on the ground)
RE
FM10
Runway excursion (a veer off or overrun off the runway surface)
RI-A
FM11
Runway incursion-animal (collision with, risk of collision, or evasive action taken by an aircraft to avoid an animal on a runway in use)
RI-VAP
FM12
Runway incursion-vehicle, a/c or person (any occurrence at an aerodrome involving the incorrect presence of an aircraft, vehicle or person on the protected area of a surface designated for the landing and takeoff of aircraft)
SEC
FM13
SEC: security related (criminal/security acts, which result in accidents or incidents)
USOS
FM14
Undershoot/overshoot (a touchdown off the runway surface)


## 3. Risk Measurement Methodology

To identify, measure, and prioritize the risk items, this paper employs the methods of FMECA, fuzzy logic, and risk assessment matrix, which are discussed in this section.


### 3.1. Failure Modes, Effect, and Criticality Analysis (FMECA)

FMECA combining Failure Modes and Effect Analysis (FMEA) with Criticality Analysis (CA) is a systematic analysis method with a bottom-up pattern. In practice, FMECA risk assessment mainly consists of four methods: mode criticality, criticality rank, risk level and risk priority numbers (RPN). However, the RPN method is the most extensively used one to assess risk.In the RPN method the parameters used to determine the criticality of an item failure mode are its frequency of occurrence, the severity of its failure effects, and the likelihood that subsequent testing of the design will detect that the potential failure mode actually occurs [21]. Traditionally, RPN is the product of probability, severity and detectability [22]. Sankar and Prabhu [23] used the RPN ranks 1–1000 to represent the increasing risk of the 1000 possible severity-occurrence-detection combinations and interpreted them as if-then rules by an expert. But different sets of severity-occurrence detection may produce the same RPN value, and their hidden risk implications may be different. Ahmet and Mehmet [2] used the fuzzy technique for order preference by similarity to ideal solution (TOPSIS) based fuzzy analytical hierarchy process (FAHP) to find the most important and risky potential failure mode (PFM). Daya and Roof [24] consider the importance of risk factors by using exponential weight. Chang and Wen used the Ordered Weighted Average (OWA) operator to resolve the problem of measurement scale [10]. Lee and Chang [25] tried to apply the TOPSIS method to allocate weights to risk decision factors, but they still failed to determine the threshold of risk assessment matrix effectively. In order to resolve the problems mentioned above, this paper formulates the RPN with criticality of risk decision factors in the form of exponential weight by
(1)RPNijk=k×PijkWpSijkWsDijkWd,
where P: probability, S: severity, D: detectability, k: constant, i: flight procedure, j: risk occurrence area, k: failure mode, Wp, Ws, Wd: the weights of probability, severity, and detectability, respectively, and the sum of weights is equal to 1.Equation (1) shows that the higher the probability, severity, and undetectability of a risk item, the more critical the RPN is. Risks with a high RPN are assumed to be more important and should be given a higher priority than those having a lower RPN. Hence, this paper considers probability, severity, and detectability as state variables and RPN as a control variable in the following FLC process.A good FMEA can help analysts identify known and potential failure modes as well as their causes and effects and prioritize the identified failure modes and can also work out corrective actions for the failure modes [7]. To analyze the complicated airport airside risk, this paper assesses the values of probability, severity, detectability in each failure mode and their corresponding RPN values and ranks them in terms of RPN values.


### 3.2. Fuzzy Logic

Fuzzy logic provides a tool for directly working with the linguistic terms used in making the criticality assessment. A criticality assessment based on fuzzy logic allows an analyst to evaluate the risk associated with failure modes in a natural way [21]. Fuzzy logic, based on the if-then rules with expert’s knowledge, formulates rules in linguistic terms rather than in numerical terms, which can deal with situations such as the assessment of airport airside risk with insufficient and imprecise information. This paper adopts fuzzy logic to analyze the airport airside risks and its process is discussed as follows and shown in Figure 1.Figure 1
Frame work of the risk assessment.Step
1 (identification of the airport airside risks (described in Section2)). The airport airside risk items are identified in Section 2.Step
2 (fuzzification of
P
,
S
,
D
and risk). The fuzzification process first converts the probability, severity, and detectability inputs into their linguistic variables and then fuzzifies them to determine their degrees of membership through membership functions. The membership function of fuzzy numbers presented here is the most popular triangular one because it is easy to use and interpret. A triangular membership function of fuzzy number x in fuzzy set A can be defined as follows:
(2)μA(x)=A(x;xm,xs,xM)={0,x≤xm,(x-xmxs-xm),xm≤x≤xs,1-(x-xsxM-xs),xs≤x≤xM,0,x≥xM,
where xs=(xm+xs)/2.x
m, xs, and xM denote the smallest possible value, the most promising value, and the largest possible value that describe a fuzzy event, respectively. A sample of a triangular fuzzy is shown in Figure 2.Figure 2
A triangular membership function ofX.Three classes of the linguistic variable, high, moderate and low, as defined in this paper, overlap between adjacent membership functions and are shown in Figure3.Figure 3
Three classes of lingulstic variable.Step
3 (derivation of fuzzy rules between
P
,
S
,
D
and risk). Fuzzy inference rules (If-then) have the form: “if x is A and y is B then z is C”, where A, B and C are the linguistic values defined by fuzzy sets in the universe of discourse X, Y, and Z, respectively [26]. The If-Then rules have two parts: an antecedent (state variable), which is compared to the inputs, and a consequent (control variable), which is the result. All the rules that have any truth in their premises will fire and contribute to the fuzzy conclusion set.Fuzzy rules are generated through expert knowledge in this paper. These rules can be viewed as relations between state variables and a control variable, or a qualitative evaluation of riskiness for various combinations ofP, S, and D. One example is “if probability (P) is low, severity (S) is low, and detectability (D) is low, then risk (R) is low.” For the fuzzy criticality analysis, we express the failure probability through its occurrence, the seriousness of a failure through its severity and how easy it is to detect a failure through its detectability. Each rule is fired to a degree that is a function of the membership to which its antecedent matches the input.Step
4 (evaluation to a fuzzy conclusion). The fuzzy inference process uses “min-max inference” to calculate the rule conclusions based on the system input values [27]. The result of this process is called the “fuzzy conclusion.” The truth-value of a rule is determined from the conjunction of the rule antecedents. With conjunction defined as “minimum,” rule evaluation then consists of determining the smallest (minimum) rule antecedent, which is taken to be the truth value of the rule. This truth-value is then applied to all consequences of the rule. If any fuzzy output is a consequence of more than one rule, that output is set to the highest (maximum) truth-value of all the rules that include it as a consequence. The result of the rule evaluation is a set of fuzzy conclusions that reflect the effects of all the rules whose truth values are greater than zero [21]. The fuzzy conclusion process goes through the stages of fuzzification of inputs and output, application of fuzzy operation and implication, aggregation method [6].Step
5 (defuzzification to a crisp RPN). The result of fuzzy operations is a fuzzy number and in some situations a single scalar quantity is needed as an output. To establish how risky the airport is and prioritize its failure modes, it is required to convert a fuzzy number into a crisp value. The defuzzification process is required to decipher the meaning of the fuzzy conclusions and their membership values, and resolve conflicts between differing results, which may have been triggered during the rule evaluation [21]. There are several available defuzzification methods for this purpose in the literature. Weights mean of maximum (WMOM), centroid method (or center of area, COA), and a-cut methods are the most common defuzzification methods [28, 29]. This paper adopts the “WMOM” method whose formula is
(3)Z=∑i=1nwixi∑i=1nwi,
where n: the number of quantified risk conclusions; xi: the support value at which the ith membership function reaches its max value; wi: the degree of truth of the ith membership function; Z: the weighted mean of maximum conclusion.TheZ value represents crisp ranking from the fuzzy conclusion set. In this paper it is defined as RPN.Step
6 (generation of weights of
P
,
S
, and
D
). The RPN method uses linguistic terms to rank the probability, severity, and detectability on a numeric scale from 0 to 100. These rankings are then multiplied with exponential weight form to give the RPN (see (1)). According to all crisp inputs of probability, severity, detectability and crisp outputs of RPN, this paper applies (1) to compute the corresponding weights (Wp, Ws, Wd) and the constant k value. The weight value represents the importance of risk decision factors. When there are planning strategies to reduce risk in the future, the strategies to lower severity of risk should be considered first to have a greater achievement if the weight of severity is the highest.


### 3.3. Risk Assessment Matrix

Because the causes of airport airside risk are very complicated, mapping risk assessment matrix traditionally is rough and unable to define the existing risk threshold value objectively. This paper conducts questionnaire and responses from experts to construct fuzzy membership function, formulate linguistic class and evaluation criteria, and establishe expert’s rules. Furthermore, this paper incorporates the weight of the decision factor through fuzzy logic method and then determines risk assessment matrix threshold value to assess the airport airside risk effectively.Step
7 (risk assessment matrix and the threshold value). Risk assessment is the process by which operators focus on critical areas of concern and prioritize their use of resources in order to maximize the improvement efforts. In making strategic decisions, operators routinely try to predict the benefits and/or harm that might be caused by implementing or failing to implement those decisions. The Risk Assessment Matrix can be viewed as a logical extension of that process. It provides a systematic method for assigning a risk level to a failure mode based on the probability, severity, and detectability of the occurrence. However, because the ambiguous characteristic of inputs (probability, severity, and detectability) and outputs (risk) for uncertain consequences, inputs to Risk Assessment Matrix and resulting outputs require subjective interpretation, and different users may obtain opposite ratings of the same quantitative risks. These limitations suggest that Risk Assessment Matrices should be used with caution, and only with careful explanations of embedded judgments. This paper constructs the basic structure of a Risk Assessment Matrix shown in Table 3.Table 3
Structure of risk assessment matrix.
Severity
Probability
L (low)
M (moderate)
H (high)
H (high)
Reviewed risk
Unaccepted  risk
Unaccepted  risk
M (moderate)
Accepted risk
Reviewed risk
Unaccepted  risk
L (low)
Accepted risk
Accepted risk
Reviewed riskAlthough airport operators can identify the risk categorization by probability, severity, and detectability through Risk Assessment Matrix, the sequential improvement of risk items with same risk categorization cannot be determined exactly without the RPN. To solve these problems, this paper identifies the threshold value between reviewed risk and acceptable risk and the threshold value between reviewed risk and unaccepted risk through the ranking of RPN.


## 3.1. Failure Modes, Effect, and Criticality Analysis (FMECA)

FMECA combining Failure Modes and Effect Analysis (FMEA) with Criticality Analysis (CA) is a systematic analysis method with a bottom-up pattern. In practice, FMECA risk assessment mainly consists of four methods: mode criticality, criticality rank, risk level and risk priority numbers (RPN). However, the RPN method is the most extensively used one to assess risk.In the RPN method the parameters used to determine the criticality of an item failure mode are its frequency of occurrence, the severity of its failure effects, and the likelihood that subsequent testing of the design will detect that the potential failure mode actually occurs [21]. Traditionally, RPN is the product of probability, severity and detectability [22]. Sankar and Prabhu [23] used the RPN ranks 1–1000 to represent the increasing risk of the 1000 possible severity-occurrence-detection combinations and interpreted them as if-then rules by an expert. But different sets of severity-occurrence detection may produce the same RPN value, and their hidden risk implications may be different. Ahmet and Mehmet [2] used the fuzzy technique for order preference by similarity to ideal solution (TOPSIS) based fuzzy analytical hierarchy process (FAHP) to find the most important and risky potential failure mode (PFM). Daya and Roof [24] consider the importance of risk factors by using exponential weight. Chang and Wen used the Ordered Weighted Average (OWA) operator to resolve the problem of measurement scale [10]. Lee and Chang [25] tried to apply the TOPSIS method to allocate weights to risk decision factors, but they still failed to determine the threshold of risk assessment matrix effectively. In order to resolve the problems mentioned above, this paper formulates the RPN with criticality of risk decision factors in the form of exponential weight by
(1)RPNijk=k×PijkWpSijkWsDijkWd,
where P: probability, S: severity, D: detectability, k: constant, i: flight procedure, j: risk occurrence area, k: failure mode, Wp, Ws, Wd: the weights of probability, severity, and detectability, respectively, and the sum of weights is equal to 1.Equation (1) shows that the higher the probability, severity, and undetectability of a risk item, the more critical the RPN is. Risks with a high RPN are assumed to be more important and should be given a higher priority than those having a lower RPN. Hence, this paper considers probability, severity, and detectability as state variables and RPN as a control variable in the following FLC process.A good FMEA can help analysts identify known and potential failure modes as well as their causes and effects and prioritize the identified failure modes and can also work out corrective actions for the failure modes [7]. To analyze the complicated airport airside risk, this paper assesses the values of probability, severity, detectability in each failure mode and their corresponding RPN values and ranks them in terms of RPN values.


## 3.2. Fuzzy Logic

Fuzzy logic provides a tool for directly working with the linguistic terms used in making the criticality assessment. A criticality assessment based on fuzzy logic allows an analyst to evaluate the risk associated with failure modes in a natural way [21]. Fuzzy logic, based on the if-then rules with expert’s knowledge, formulates rules in linguistic terms rather than in numerical terms, which can deal with situations such as the assessment of airport airside risk with insufficient and imprecise information. This paper adopts fuzzy logic to analyze the airport airside risks and its process is discussed as follows and shown in Figure 1.Figure 1
Frame work of the risk assessment.Step
1 (identification of the airport airside risks (described in Section2)). The airport airside risk items are identified in Section 2.Step
2 (fuzzification of
P
,
S
,
D
and risk). The fuzzification process first converts the probability, severity, and detectability inputs into their linguistic variables and then fuzzifies them to determine their degrees of membership through membership functions. The membership function of fuzzy numbers presented here is the most popular triangular one because it is easy to use and interpret. A triangular membership function of fuzzy number x in fuzzy set A can be defined as follows:
(2)μA(x)=A(x;xm,xs,xM)={0,x≤xm,(x-xmxs-xm),xm≤x≤xs,1-(x-xsxM-xs),xs≤x≤xM,0,x≥xM,
where xs=(xm+xs)/2.x
m, xs, and xM denote the smallest possible value, the most promising value, and the largest possible value that describe a fuzzy event, respectively. A sample of a triangular fuzzy is shown in Figure 2.Figure 2
A triangular membership function ofX.Three classes of the linguistic variable, high, moderate and low, as defined in this paper, overlap between adjacent membership functions and are shown in Figure3.Figure 3
Three classes of lingulstic variable.Step
3 (derivation of fuzzy rules between
P
,
S
,
D
and risk). Fuzzy inference rules (If-then) have the form: “if x is A and y is B then z is C”, where A, B and C are the linguistic values defined by fuzzy sets in the universe of discourse X, Y, and Z, respectively [26]. The If-Then rules have two parts: an antecedent (state variable), which is compared to the inputs, and a consequent (control variable), which is the result. All the rules that have any truth in their premises will fire and contribute to the fuzzy conclusion set.Fuzzy rules are generated through expert knowledge in this paper. These rules can be viewed as relations between state variables and a control variable, or a qualitative evaluation of riskiness for various combinations ofP, S, and D. One example is “if probability (P) is low, severity (S) is low, and detectability (D) is low, then risk (R) is low.” For the fuzzy criticality analysis, we express the failure probability through its occurrence, the seriousness of a failure through its severity and how easy it is to detect a failure through its detectability. Each rule is fired to a degree that is a function of the membership to which its antecedent matches the input.Step
4 (evaluation to a fuzzy conclusion). The fuzzy inference process uses “min-max inference” to calculate the rule conclusions based on the system input values [27]. The result of this process is called the “fuzzy conclusion.” The truth-value of a rule is determined from the conjunction of the rule antecedents. With conjunction defined as “minimum,” rule evaluation then consists of determining the smallest (minimum) rule antecedent, which is taken to be the truth value of the rule. This truth-value is then applied to all consequences of the rule. If any fuzzy output is a consequence of more than one rule, that output is set to the highest (maximum) truth-value of all the rules that include it as a consequence. The result of the rule evaluation is a set of fuzzy conclusions that reflect the effects of all the rules whose truth values are greater than zero [21]. The fuzzy conclusion process goes through the stages of fuzzification of inputs and output, application of fuzzy operation and implication, aggregation method [6].Step
5 (defuzzification to a crisp RPN). The result of fuzzy operations is a fuzzy number and in some situations a single scalar quantity is needed as an output. To establish how risky the airport is and prioritize its failure modes, it is required to convert a fuzzy number into a crisp value. The defuzzification process is required to decipher the meaning of the fuzzy conclusions and their membership values, and resolve conflicts between differing results, which may have been triggered during the rule evaluation [21]. There are several available defuzzification methods for this purpose in the literature. Weights mean of maximum (WMOM), centroid method (or center of area, COA), and a-cut methods are the most common defuzzification methods [28, 29]. This paper adopts the “WMOM” method whose formula is
(3)Z=∑i=1nwixi∑i=1nwi,
where n: the number of quantified risk conclusions; xi: the support value at which the ith membership function reaches its max value; wi: the degree of truth of the ith membership function; Z: the weighted mean of maximum conclusion.TheZ value represents crisp ranking from the fuzzy conclusion set. In this paper it is defined as RPN.Step
6 (generation of weights of
P
,
S
, and
D
). The RPN method uses linguistic terms to rank the probability, severity, and detectability on a numeric scale from 0 to 100. These rankings are then multiplied with exponential weight form to give the RPN (see (1)). According to all crisp inputs of probability, severity, detectability and crisp outputs of RPN, this paper applies (1) to compute the corresponding weights (Wp, Ws, Wd) and the constant k value. The weight value represents the importance of risk decision factors. When there are planning strategies to reduce risk in the future, the strategies to lower severity of risk should be considered first to have a greater achievement if the weight of severity is the highest.


## 3.3. Risk Assessment Matrix

Because the causes of airport airside risk are very complicated, mapping risk assessment matrix traditionally is rough and unable to define the existing risk threshold value objectively. This paper conducts questionnaire and responses from experts to construct fuzzy membership function, formulate linguistic class and evaluation criteria, and establishe expert’s rules. Furthermore, this paper incorporates the weight of the decision factor through fuzzy logic method and then determines risk assessment matrix threshold value to assess the airport airside risk effectively.Step
7 (risk assessment matrix and the threshold value). Risk assessment is the process by which operators focus on critical areas of concern and prioritize their use of resources in order to maximize the improvement efforts. In making strategic decisions, operators routinely try to predict the benefits and/or harm that might be caused by implementing or failing to implement those decisions. The Risk Assessment Matrix can be viewed as a logical extension of that process. It provides a systematic method for assigning a risk level to a failure mode based on the probability, severity, and detectability of the occurrence. However, because the ambiguous characteristic of inputs (probability, severity, and detectability) and outputs (risk) for uncertain consequences, inputs to Risk Assessment Matrix and resulting outputs require subjective interpretation, and different users may obtain opposite ratings of the same quantitative risks. These limitations suggest that Risk Assessment Matrices should be used with caution, and only with careful explanations of embedded judgments. This paper constructs the basic structure of a Risk Assessment Matrix shown in Table 3.Table 3
Structure of risk assessment matrix.
Severity
Probability
L (low)
M (moderate)
H (high)
H (high)
Reviewed risk
Unaccepted  risk
Unaccepted  risk
M (moderate)
Accepted risk
Reviewed risk
Unaccepted  risk
L (low)
Accepted risk
Accepted risk
Reviewed riskAlthough airport operators can identify the risk categorization by probability, severity, and detectability through Risk Assessment Matrix, the sequential improvement of risk items with same risk categorization cannot be determined exactly without the RPN. To solve these problems, this paper identifies the threshold value between reviewed risk and acceptable risk and the threshold value between reviewed risk and unaccepted risk through the ranking of RPN.


## 4. Case Study

Taiwan Taoyuan International Airport (TTIA) located in Taoyuan County, is the largest and busiest international airport in Taiwan. This paper uses TTIA as a case study. In order to investigate the airport airside risks occurred at TTIA, this paper conducted an in-depth survey by 5 experts (including one airline practitioner, one flyer, and three government officials). The questions include the probability, severity, detectability, and RPN using the linguistic term set {high, moderate, low}, each expert specified the value range for each term between 0 and 100, represented as a triangle fuzzy number. The step-by-step algorithm for this example is as follows.


### 4.1. Algorithm

Step 1 (identification of the TTIA airside risks).
The TTIA airside risks as defined in Section2 and Tables 1 and 2 were identified.Step 2 (fuzzification ofP, S, D and risk).
Based on the expert questionnaire, the scales and membership functions identified by triangular fuzzy number corresponding to each fuzzy linguistic variable are shown in Tables4, 5, 6, and 7.
To fuzzify the inputs, this paper puts the probability, severity, and detectability assessment on the corresponding scale and determines the degree of membership in the corresponding fuzzy sets. Take the evaluation of ground handling risk occurring at apron-gate in the standing procedure as an example; its probability, severity, and detectability are assessed as 37, 34, and 35, respectively. Referring to (2) and Table 6, a probability of 37 means that it will have a low probability with a membership of 0.24 and a moderate probability with a membership of 0.2. Because the membership of low probability is higher than the moderate one, we assume the linguistic variable here is low. Similarly, we repeat the fuzzification procedure; the results are shown in Table 8.Table 4
Probability evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Repeated failures
(74, 100, 100)
Moderate
Occasional failures
(32, 57, 82)
Low
Relatively few failures
(0, 0, 46)Table 5
Severity evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Serious property loss or death
(56, 100, 100)
Moderate
Property loss or life injury
(28, 51, 74)
Low
Slight property loss
(0, 0, 35)Table 6
Detectability evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Failure is easily be detected
(66, 100, 100)
Moderate
Failure may be detected
(33, 52, 71)
Low
Failure is hardly detected
(0, 0, 42)Table 7
Risk level evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Unacceptable risk
(64, 100, 100)
Moderate
Reviewed risk
(22, 52, 82)
Low
Acceptable risk
(0, 0, 33)Table 8
Membership of linguistic class.
Input parameter
Linguistic variable
Membership
Probability
Low
0.24 (max)
Moderate
0.2
Severity
Low
0.03
Moderate
0.26 (max)
Detectability
Low
0.17 (max)
Moderate
0.11Step 3 (derivation of the fuzzy rule).
Through brainstorming among the experts, this paper assumes 14 fuzzy rules and these are shown in Table9. For example, Rule J in Table 11 should be read as follows: if probability is moderate, severity is low and detectability is from high to moderate, then the risk is Low.Table 9
Fuzzy rules.
Rule no.
Probability
Severity
Detectability
Risk
Rule A
High
High
High, moderate, low
High
Rule B
High
Moderate
Moderate, low
High
Rule C
High
Moderate
High
Moderate
Rule D
High
Low
Moderate, low
Moderate
Rule E
High
Low
High
Low
Rule F
Moderate
High
High, moderate, low
High
Rule G
Moderate
Moderate
Low
High
Rule H
Moderate
Moderate
High, moderate
Moderate
Rule I
Moderate
Low
Low
Moderate
Rule J
Moderate
Low
High, moderate
Low
Rule K
Low
High
Moderate, low
High
Rule L
Low
High
High
Moderate
Rule M
Low
Moderate
High, moderate, low
Moderate
Rule N
Low
Low
High, moderate, low
LowStep 4 (evaluation to a fuzzy conclusion).
Following the preceding example, Rule G, Rule H, Rule I, Rule J, Rule M, and Rule N are individually matched and fired for the 6 input combinations. To determine the truth-value of the result “Low” from Rule N we note that its premise is the conjunction of the probability = Low, severity = Low, and detectability = Low, fuzzy sets, with membership values of 0.24, 0.03, and 0.17, respectively. Thus, the conclusion, risk = Low, has a membership value ofmin(0.24,0.03,0.17)=0.03. Similarly, we can reference Tables 4–6 and repeat the evaluation procedure to yield all results shown in Table 10.Table 10
Evaluation to a fuzzy conclusion-example.
Rule no.
Probability (d. m.)
Severity (d. m.)
Detectability (d. m.)
Risk
Min. membership
Rule N
Low (0.24)
Low (0.03)
Low (0.17)
Low
μ (low risk) = 0.03
Rule N
Low (0.24)
Low (0.03)
Moderate (0.11)
Low
μ (low risk) = 0.03
Rule M
Low (0.24)
Moderate (0.26)
Low (0.17)
Moderate
μ (moderate risk) = 0.17
Rule M
Low (0.24)
Moderate (0.26)
Moderate (0.11)
Moderate
μ (moderate risk) = 0.11
Rule I
Moderate (0.2)
Low (0.03)
Low (0.17)
Moderate
μ (moderate risk) = 0.03
Rule J
Moderate (0.2)
Low (0.03)
Moderate (0.11)
Low
μ (low risk) = 0.03
Rule G
Moderate (0.2)
Moderate (0.26)
Low (0.17)
High
μ (high risk) = 0.17
Rule H
Moderate (0.2)
Moderate (0.26)
Moderate (0.11)
Moderate
μ (moderate risk) = 0.11
d. m.: degree of membership.Table 11
FMECA, airport airside risk evaluation.
Procedure
Risk occurrence area
FM
P
S
D
RPN
Rank
Risk level
Standing (339.43)
Apron-gate area (131.95)
FM2
15
10
10
13.59
76
L
FM5
18
46
5
38.30
66
M
FM6
37
34
35
69.80
59
M
FM13
8
30
82
35.86
67
L
Holding pad (207.47)
FM2
14
45
8
38.59
65
M
FM3
14
48
12
42.61
62
M
FM5
12
52
6
40.31
63
M
FM6
18
56
20
52.84
50
M
FM13
6
30
62
33.12
69
L
Pushback/towing (282.97)
Apron-gate area (282.97)
FM2
5
24
14
22.62
74
L
FM3
16
50
24
48.99
53
M
FM5
20
58
10
50.31
52
M
FM6
22
62
14
55.94
47
M
FM8
4
30
5
22.47
75
L
FM9
18
48
10
43.21
60
M
FM13
6
38
64
39.43
64
M
Taxi (1724.78)
Taxiway system (485.86)
FM2
10
72
30
61.11
42
M
FM3
12
90
29
73.43
21
M
FM5
18
84
10
64.66
38
M
FM6
22
88
28
78.77
12
M
FM7
12
90
8
62.11
40
M
FM8
2
80
10
44.90
58
M
FM9
20
92
12
71.81
23
M
FM13
5
30
28
29.06
70
L
Holding pad (324.77)
FM2
8
52
42
48.85
54
M
FM3
10
86
30
69.45
29
M
FM5
10
80
10
57.16
44
M
FM6
18
70
20
62.05
41
M
FM8
6
30
17
27.99
71
L
FM9
4
48
8
33.50
68
M
FM13
2
30
32
25.77
72
L
Runway (914.15)
FM1
15
88
22
72.08
22
M
FM2
14
82
30
70.59
28
M
FM3
16
94
24
77.19
13
M
FM5
22
92
10
71.14
26
M
FM6
26
92
30
84.15
10
M
FM7
14
94
10
67.52
32
M
FM8
2
86
12
48.43
55
M
FM9
22
98
12
76.24
16
M
FM10
19
98
63
92.52
9
H
FM11
42
88
79
99.32
5
H
FM12
43
96
58
100.00
3
H
FM13
4
66
62
54.98
49
M
Takeoff (450.07)
Terminal airspace (450.07)
FM1
29
92
82
97.48
7
H
FM2
4
87
18
57.12
45
M
FM3
26
98
69
98.13
6
H
FM4
19
92
16
73.98
18
M
FM5
6
92
28
66.93
34
M
FM13
4
78
30
56.43
46
M
Approach (313.25)
Terminal airspace (313.25)
FM2
6
52
22
43.01
61
M
FM3
18
98
73
93.55
8
H
FM4
4
99
30
66.99
33
M
FM5
6
76
30
58.85
43
M
FM13
4
62
48
50.84
51
M
Landing (1542.42)
Taxiway system (488.49)
FM2
12
88
19
68.39
31
M
FM3
18
94
30
80.87
11
M
FM5
10
90
16
66.13
35
M
FM6
16
88
7
62.71
39
M
FM7
16
92
12
69.45
30
M
FM8
2
86
8
45.94
57
M
FM9
22
90
11
70.90
27
M
FM13
2
30
19
24.09
73
L
Runway (1053.93)
FM1
41
95
59
100.00
4
H
FM2
16
90
30
77.01
15
M
FM3
14
94
20
73.88
20
M
FM4
8
98
23
71.29
24
M
FM5
10
91
14
65.52
37
M
FM6
16
90
22
73.96
19
M
FM7
12
98
8
66.04
36
M
FM8
2
88
10
48.09
56
M
FM9
18
96
10
71.18
25
M
FM10
16
97
15
74.27
17
M
FM11
42
96
68
100.00
1
H
FM12
41
98
57
100.00
2
H
FM13
7
68
30
55.59
48
M
FM14
16
97
20
77.10
14
MStep 5 (defuzzification to a crisp RPN).
The degree of membership of the conclusion is sometimes interpreted as its “degree of truth.” In the preceding example, the support value at the maximal degree of membership and the truth-value of each fuzzy conclusion (see Tables7 and 10) are the following. The maximum support value and truth-value (degree of membership) of low risk are 0 and 0.03 (μ(lowrisk)=max(0.03,0.03,0.03)=0.03). The maximum support-value and truth-value (degree of membership) of moderate risk are 52 and 0.17 (μ(moderaterisk)=max(0.17,0.11,0.03,0.11)=0.17). The maximum support-value and truth-value (degree of membership) of high risk are 100 and 0.17 (μ(highrisk)=0.17). Hence, applying to (3), the Z value is
(4)Z=(0.03×0+0.17×52+0.17×100)(0.03+0.17+0.17)=69.8.
Similarly, we can repeat the defuzzification procedure to yield all weighted mean of maximum conclusions. TheZ value represents crisp ranking from the fuzzy conclusion set. We can define it as RPN, the overall results shown in Table 11.Step 6 (generation of the weights ofP, S, and D).
According to crisp inputs of probability, severity, and detectability and crisp outputs of RPN in Table11, we apply (1) to compute the corresponding weights: Wp=0.15, Ws=0.72, Wd=-0.13, and k=5.0869. The weight value represents the importance of risk decision factors. In the assessment of airside risk occurred in TTIA, we conclude that severity of risk is much more important than probability and detectability. Therefore, when planning strategies to reduce risk in the future, strategies to lower severity of risk should be considered first to have a greater impact.Step 7 (risk assessment matrix and threshold value).
To construct the TTIA Risk Assessment Matrix, we must make sure of the relationship between decision factors and their corresponding risk levels first. Following the preceding example, the linguistic class of probability, severity, and detectability are low, moderate, and low, respectively. It conforms to Rule M in Table9, so we determine that the risk level here is moderate. Referring to the risk level evaluation criteria, moderate, risk level means the risk must be reviewed (see Table 7). Similarly, we compute all the risk level, and complete “Risk Level” column in Table 11. Finally, this paper derived at the TTIA Risk Assessment Matrix as shown in Table 12.
Table12 shows that the risk level increased from the lower-left side (accepted risk) to the upper-right side (unaccepted risk). Although airport operators can identify the risk categorization by probability, severity, and detectability through Risk Assessment Matrix, the sequential improvement of risk items with same risk categorization cannot be determined exactly without the RPN. In addition, based on the information in Table 11, this paper finds that the highest 9 risks all correspond to unacceptable risk category, and their RPNs are from 92.52 to 100. Hence, the threshold value between reviewed and unacceptable risk can be assumed as 92.52. Similarly, this paper can determine the threshold value between reviewed risk and acceptable risk, shown in Table 13.
The threshold value in Table13 shows that if RPN is less than 33.5, the risk is acceptable. If RPN is between 33.5 and 92.52, the risk must be reviewed at all times. Otherwise, if RPN is more than 92.52, the risk is unacceptable and should take improvement measures to lower the risk to reasonably practicable (ALARP) extent.Table 12
TTIA risk assessment matrix.
Probability
L (low)
M (moderate)
H (high)
L
Unaccepted
L
Unaccepted
L
Unaccepted
H
Detectability
M
Unaccepted
Detect-ability
M
Unaccepted
Detect-ability
M
Unaccepted
H
Reviewed
H
Unaccepted
H
Unaccepted
L
Reviewed
L
Unaccepted
L
Unaccepted
Severity
M
Detectability
M
Reviewed
Detect-ability
M
Reviewed
Detect-ability
M
Unaccepted
H
Reviewed
H
Reviewed
H
Reviewed
L
Accepted
L
Reviewed
L
Reviewed
L
Detectability
M
Accepted
Detect-ability
M
Accepted
Detect-ability
M
Reviewed
H
Accepted
H
Accepted
H
AcceptedTable 13
Threshold value of the risk assessment matrix.
Threshold value
Risk level
Code
Meaning
9
2.52
≦
RPN
High risk
H
Risk is unacceptable
33.5
≦
RPN
<
92.52
Moderate risk
M
Risk must be reviewed
RPN
<
33.5
Low risk
L
Risk is acceptable


### 4.2. Results Analysis

We can easily analyze the airport airside risk utilizing our fuzzy assessment system described in previous sections. Table1 shows the airside-related risks in TTIA; Table 11 shows “runway incursion-animal at runway in the landing procedure” is the most critical risk, and the airport operator must take improvement measures to lower the risk to reasonably practicable (ALARP) extent immediately. The other unaccepted risks in TTIA are “runway incursion-animal at runway in the taxi procedure,” “abnormal runway contact at terminal airspace in the takeoff procedure,” and “runway incursion-vehicle, a/c, or person at runway in the landing and taxi procedure” in order.Moreover, referring to the threshold value in Table13, the highest 9 risks whose RPNs are more than 92.52 are determined as unacceptable risks; the TTIA operator must pay more attention to reducing those risks in order. Similarly, the lowest 9 risks are acceptable risks and the rest other 59 risks are should be reviewed at all time. In addition, easing the severity of risk should be considered first to have a greater achievement because of the most critical importance of it (Ws=0.72>Wp=0.15>|Wd|=0.13). In order to make further analysis of risk pattern, this paper compiles statistics from Table 11 by risk category, occurrence area, and flight operation procedure, shown in Tables 14–16.Table 14
TTIA airside risk items RPN list.
Risk items
Frequency
RPN
Avg. RPN
ARC
3
269.56
89.85
ADRM
10
500.87
50.09
ATM
9
658.12
73.12
CFIT
3
212.26
70.75
F-NI
10
579.30
57.93
RAMP
8
514.62
64.33
GCOL
4
265.12
66.28
ICE
6
237.82
39.64
LOC-G
6
366.85
61.14
RE
2
166.79
83.40
RI-A
2
203.02
101.51
RI-VAP
2
202.98
101.49
SEC
10
405.18
40.52
USOS
1
77.10
77.10Table 15
TTIA airside occurrence areas RPN list.
Occurrence area
Aggregate RPN
Apron-gate area
414.92
Holding pad
532.24
Taxiway system
974.35
Runway
1968.08
Terminal airspace
763.32Table 16
TTIA airside flight operation procedures RPN list.
Procedure
Aggregate RPN
STD
339.43
PBT
282.97
TXI
1724.78
TOF
450.77
APR
313.25
LDG
1542.42Table14 and Figure 4 show that aerodrome (ADRM), fire/smoke (F-NI), and related security (SEC) are the most 3 frequent risks with occurrence frequency =10, and “ATM” accounts for 14.14% (RPN=658.12) of total risk (RPN=4652.91), while runway incursion-animal (RI-A) is the biggest single risk item (RPN=101.51).Figure 4
TTIA airside risk items-RPN chart.Table15 and Figure 5 show that “runway” is the most risky area in the TTIA airside and accounts for 42% of total risk. The risk ranking of other TTIA airside area is “taxiway system,” “terminal airspace,” “holding pad,” and “apron-gate area” in order.Figure 5
TTIA occurrence areas-RPN chart.Regarding the flight operation procedure where risks occurred, Table16 and Figure 6 show that procedures on taxi (TXI) are the most dangerous stage, accounting for 37% of total risk, followed by procedures on landing (LDG). These two flight operation procedures contribute to 71% of the total risk. The risk ranking of other flight operation procedures in TTIA is takeoff (TOF), standing (STD), approach (APR), and pushback/towing (PBT).Figure 6
TTIA airside operation procedures-RPN chart.Based upon the analysis by risk category, occurrence area and flight operations procedures above, we determine that “RI-A” is the biggest single risk item, “runway” is the most risky area, and “TXI” and “LDG” are the most dangerous stage in TTIA. This result conforms to the overall analysis conclusion that the greatest risk is “runway incursion–animal at runway in the landing procedure” (see Table11).


## 4.1. Algorithm

Step 1 (identification of the TTIA airside risks).
The TTIA airside risks as defined in Section2 and Tables 1 and 2 were identified.Step 2 (fuzzification ofP, S, D and risk).
Based on the expert questionnaire, the scales and membership functions identified by triangular fuzzy number corresponding to each fuzzy linguistic variable are shown in Tables4, 5, 6, and 7.
To fuzzify the inputs, this paper puts the probability, severity, and detectability assessment on the corresponding scale and determines the degree of membership in the corresponding fuzzy sets. Take the evaluation of ground handling risk occurring at apron-gate in the standing procedure as an example; its probability, severity, and detectability are assessed as 37, 34, and 35, respectively. Referring to (2) and Table 6, a probability of 37 means that it will have a low probability with a membership of 0.24 and a moderate probability with a membership of 0.2. Because the membership of low probability is higher than the moderate one, we assume the linguistic variable here is low. Similarly, we repeat the fuzzification procedure; the results are shown in Table 8.Table 4
Probability evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Repeated failures
(74, 100, 100)
Moderate
Occasional failures
(32, 57, 82)
Low
Relatively few failures
(0, 0, 46)Table 5
Severity evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Serious property loss or death
(56, 100, 100)
Moderate
Property loss or life injury
(28, 51, 74)
Low
Slight property loss
(0, 0, 35)Table 6
Detectability evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Failure is easily be detected
(66, 100, 100)
Moderate
Failure may be detected
(33, 52, 71)
Low
Failure is hardly detected
(0, 0, 42)Table 7
Risk level evaluation criteria.
Linguistic variable
Definitions
Triangular fuzzy number
High
Unacceptable risk
(64, 100, 100)
Moderate
Reviewed risk
(22, 52, 82)
Low
Acceptable risk
(0, 0, 33)Table 8
Membership of linguistic class.
Input parameter
Linguistic variable
Membership
Probability
Low
0.24 (max)
Moderate
0.2
Severity
Low
0.03
Moderate
0.26 (max)
Detectability
Low
0.17 (max)
Moderate
0.11Step 3 (derivation of the fuzzy rule).
Through brainstorming among the experts, this paper assumes 14 fuzzy rules and these are shown in Table9. For example, Rule J in Table 11 should be read as follows: if probability is moderate, severity is low and detectability is from high to moderate, then the risk is Low.Table 9
Fuzzy rules.
Rule no.
Probability
Severity
Detectability
Risk
Rule A
High
High
High, moderate, low
High
Rule B
High
Moderate
Moderate, low
High
Rule C
High
Moderate
High
Moderate
Rule D
High
Low
Moderate, low
Moderate
Rule E
High
Low
High
Low
Rule F
Moderate
High
High, moderate, low
High
Rule G
Moderate
Moderate
Low
High
Rule H
Moderate
Moderate
High, moderate
Moderate
Rule I
Moderate
Low
Low
Moderate
Rule J
Moderate
Low
High, moderate
Low
Rule K
Low
High
Moderate, low
High
Rule L
Low
High
High
Moderate
Rule M
Low
Moderate
High, moderate, low
Moderate
Rule N
Low
Low
High, moderate, low
LowStep 4 (evaluation to a fuzzy conclusion).
Following the preceding example, Rule G, Rule H, Rule I, Rule J, Rule M, and Rule N are individually matched and fired for the 6 input combinations. To determine the truth-value of the result “Low” from Rule N we note that its premise is the conjunction of the probability = Low, severity = Low, and detectability = Low, fuzzy sets, with membership values of 0.24, 0.03, and 0.17, respectively. Thus, the conclusion, risk = Low, has a membership value ofmin(0.24,0.03,0.17)=0.03. Similarly, we can reference Tables 4–6 and repeat the evaluation procedure to yield all results shown in Table 10.Table 10
Evaluation to a fuzzy conclusion-example.
Rule no.
Probability (d. m.)
Severity (d. m.)
Detectability (d. m.)
Risk
Min. membership
Rule N
Low (0.24)
Low (0.03)
Low (0.17)
Low
μ (low risk) = 0.03
Rule N
Low (0.24)
Low (0.03)
Moderate (0.11)
Low
μ (low risk) = 0.03
Rule M
Low (0.24)
Moderate (0.26)
Low (0.17)
Moderate
μ (moderate risk) = 0.17
Rule M
Low (0.24)
Moderate (0.26)
Moderate (0.11)
Moderate
μ (moderate risk) = 0.11
Rule I
Moderate (0.2)
Low (0.03)
Low (0.17)
Moderate
μ (moderate risk) = 0.03
Rule J
Moderate (0.2)
Low (0.03)
Moderate (0.11)
Low
μ (low risk) = 0.03
Rule G
Moderate (0.2)
Moderate (0.26)
Low (0.17)
High
μ (high risk) = 0.17
Rule H
Moderate (0.2)
Moderate (0.26)
Moderate (0.11)
Moderate
μ (moderate risk) = 0.11
d. m.: degree of membership.Table 11
FMECA, airport airside risk evaluation.
Procedure
Risk occurrence area
FM
P
S
D
RPN
Rank
Risk level
Standing (339.43)
Apron-gate area (131.95)
FM2
15
10
10
13.59
76
L
FM5
18
46
5
38.30
66
M
FM6
37
34
35
69.80
59
M
FM13
8
30
82
35.86
67
L
Holding pad (207.47)
FM2
14
45
8
38.59
65
M
FM3
14
48
12
42.61
62
M
FM5
12
52
6
40.31
63
M
FM6
18
56
20
52.84
50
M
FM13
6
30
62
33.12
69
L
Pushback/towing (282.97)
Apron-gate area (282.97)
FM2
5
24
14
22.62
74
L
FM3
16
50
24
48.99
53
M
FM5
20
58
10
50.31
52
M
FM6
22
62
14
55.94
47
M
FM8
4
30
5
22.47
75
L
FM9
18
48
10
43.21
60
M
FM13
6
38
64
39.43
64
M
Taxi (1724.78)
Taxiway system (485.86)
FM2
10
72
30
61.11
42
M
FM3
12
90
29
73.43
21
M
FM5
18
84
10
64.66
38
M
FM6
22
88
28
78.77
12
M
FM7
12
90
8
62.11
40
M
FM8
2
80
10
44.90
58
M
FM9
20
92
12
71.81
23
M
FM13
5
30
28
29.06
70
L
Holding pad (324.77)
FM2
8
52
42
48.85
54
M
FM3
10
86
30
69.45
29
M
FM5
10
80
10
57.16
44
M
FM6
18
70
20
62.05
41
M
FM8
6
30
17
27.99
71
L
FM9
4
48
8
33.50
68
M
FM13
2
30
32
25.77
72
L
Runway (914.15)
FM1
15
88
22
72.08
22
M
FM2
14
82
30
70.59
28
M
FM3
16
94
24
77.19
13
M
FM5
22
92
10
71.14
26
M
FM6
26
92
30
84.15
10
M
FM7
14
94
10
67.52
32
M
FM8
2
86
12
48.43
55
M
FM9
22
98
12
76.24
16
M
FM10
19
98
63
92.52
9
H
FM11
42
88
79
99.32
5
H
FM12
43
96
58
100.00
3
H
FM13
4
66
62
54.98
49
M
Takeoff (450.07)
Terminal airspace (450.07)
FM1
29
92
82
97.48
7
H
FM2
4
87
18
57.12
45
M
FM3
26
98
69
98.13
6
H
FM4
19
92
16
73.98
18
M
FM5
6
92
28
66.93
34
M
FM13
4
78
30
56.43
46
M
Approach (313.25)
Terminal airspace (313.25)
FM2
6
52
22
43.01
61
M
FM3
18
98
73
93.55
8
H
FM4
4
99
30
66.99
33
M
FM5
6
76
30
58.85
43
M
FM13
4
62
48
50.84
51
M
Landing (1542.42)
Taxiway system (488.49)
FM2
12
88
19
68.39
31
M
FM3
18
94
30
80.87
11
M
FM5
10
90
16
66.13
35
M
FM6
16
88
7
62.71
39
M
FM7
16
92
12
69.45
30
M
FM8
2
86
8
45.94
57
M
FM9
22
90
11
70.90
27
M
FM13
2
30
19
24.09
73
L
Runway (1053.93)
FM1
41
95
59
100.00
4
H
FM2
16
90
30
77.01
15
M
FM3
14
94
20
73.88
20
M
FM4
8
98
23
71.29
24
M
FM5
10
91
14
65.52
37
M
FM6
16
90
22
73.96
19
M
FM7
12
98
8
66.04
36
M
FM8
2
88
10
48.09
56
M
FM9
18
96
10
71.18
25
M
FM10
16
97
15
74.27
17
M
FM11
42
96
68
100.00
1
H
FM12
41
98
57
100.00
2
H
FM13
7
68
30
55.59
48
M
FM14
16
97
20
77.10
14
MStep 5 (defuzzification to a crisp RPN).
The degree of membership of the conclusion is sometimes interpreted as its “degree of truth.” In the preceding example, the support value at the maximal degree of membership and the truth-value of each fuzzy conclusion (see Tables7 and 10) are the following. The maximum support value and truth-value (degree of membership) of low risk are 0 and 0.03 (μ(lowrisk)=max(0.03,0.03,0.03)=0.03). The maximum support-value and truth-value (degree of membership) of moderate risk are 52 and 0.17 (μ(moderaterisk)=max(0.17,0.11,0.03,0.11)=0.17). The maximum support-value and truth-value (degree of membership) of high risk are 100 and 0.17 (μ(highrisk)=0.17). Hence, applying to (3), the Z value is
(4)Z=(0.03×0+0.17×52+0.17×100)(0.03+0.17+0.17)=69.8.
Similarly, we can repeat the defuzzification procedure to yield all weighted mean of maximum conclusions. TheZ value represents crisp ranking from the fuzzy conclusion set. We can define it as RPN, the overall results shown in Table 11.Step 6 (generation of the weights ofP, S, and D).
According to crisp inputs of probability, severity, and detectability and crisp outputs of RPN in Table11, we apply (1) to compute the corresponding weights: Wp=0.15, Ws=0.72, Wd=-0.13, and k=5.0869. The weight value represents the importance of risk decision factors. In the assessment of airside risk occurred in TTIA, we conclude that severity of risk is much more important than probability and detectability. Therefore, when planning strategies to reduce risk in the future, strategies to lower severity of risk should be considered first to have a greater impact.Step 7 (risk assessment matrix and threshold value).
To construct the TTIA Risk Assessment Matrix, we must make sure of the relationship between decision factors and their corresponding risk levels first. Following the preceding example, the linguistic class of probability, severity, and detectability are low, moderate, and low, respectively. It conforms to Rule M in Table9, so we determine that the risk level here is moderate. Referring to the risk level evaluation criteria, moderate, risk level means the risk must be reviewed (see Table 7). Similarly, we compute all the risk level, and complete “Risk Level” column in Table 11. Finally, this paper derived at the TTIA Risk Assessment Matrix as shown in Table 12.
Table12 shows that the risk level increased from the lower-left side (accepted risk) to the upper-right side (unaccepted risk). Although airport operators can identify the risk categorization by probability, severity, and detectability through Risk Assessment Matrix, the sequential improvement of risk items with same risk categorization cannot be determined exactly without the RPN. In addition, based on the information in Table 11, this paper finds that the highest 9 risks all correspond to unacceptable risk category, and their RPNs are from 92.52 to 100. Hence, the threshold value between reviewed and unacceptable risk can be assumed as 92.52. Similarly, this paper can determine the threshold value between reviewed risk and acceptable risk, shown in Table 13.
The threshold value in Table13 shows that if RPN is less than 33.5, the risk is acceptable. If RPN is between 33.5 and 92.52, the risk must be reviewed at all times. Otherwise, if RPN is more than 92.52, the risk is unacceptable and should take improvement measures to lower the risk to reasonably practicable (ALARP) extent.Table 12
TTIA risk assessment matrix.
Probability
L (low)
M (moderate)
H (high)
L
Unaccepted
L
Unaccepted
L
Unaccepted
H
Detectability
M
Unaccepted
Detect-ability
M
Unaccepted
Detect-ability
M
Unaccepted
H
Reviewed
H
Unaccepted
H
Unaccepted
L
Reviewed
L
Unaccepted
L
Unaccepted
Severity
M
Detectability
M
Reviewed
Detect-ability
M
Reviewed
Detect-ability
M
Unaccepted
H
Reviewed
H
Reviewed
H
Reviewed
L
Accepted
L
Reviewed
L
Reviewed
L
Detectability
M
Accepted
Detect-ability
M
Accepted
Detect-ability
M
Reviewed
H
Accepted
H
Accepted
H
AcceptedTable 13
Threshold value of the risk assessment matrix.
Threshold value
Risk level
Code
Meaning
9
2.52
≦
RPN
High risk
H
Risk is unacceptable
33.5
≦
RPN
<
92.52
Moderate risk
M
Risk must be reviewed
RPN
<
33.5
Low risk
L
Risk is acceptable


## 4.2. Results Analysis

We can easily analyze the airport airside risk utilizing our fuzzy assessment system described in previous sections. Table1 shows the airside-related risks in TTIA; Table 11 shows “runway incursion-animal at runway in the landing procedure” is the most critical risk, and the airport operator must take improvement measures to lower the risk to reasonably practicable (ALARP) extent immediately. The other unaccepted risks in TTIA are “runway incursion-animal at runway in the taxi procedure,” “abnormal runway contact at terminal airspace in the takeoff procedure,” and “runway incursion-vehicle, a/c, or person at runway in the landing and taxi procedure” in order.Moreover, referring to the threshold value in Table13, the highest 9 risks whose RPNs are more than 92.52 are determined as unacceptable risks; the TTIA operator must pay more attention to reducing those risks in order. Similarly, the lowest 9 risks are acceptable risks and the rest other 59 risks are should be reviewed at all time. In addition, easing the severity of risk should be considered first to have a greater achievement because of the most critical importance of it (Ws=0.72>Wp=0.15>|Wd|=0.13). In order to make further analysis of risk pattern, this paper compiles statistics from Table 11 by risk category, occurrence area, and flight operation procedure, shown in Tables 14–16.Table 14
TTIA airside risk items RPN list.
Risk items
Frequency
RPN
Avg. RPN
ARC
3
269.56
89.85
ADRM
10
500.87
50.09
ATM
9
658.12
73.12
CFIT
3
212.26
70.75
F-NI
10
579.30
57.93
RAMP
8
514.62
64.33
GCOL
4
265.12
66.28
ICE
6
237.82
39.64
LOC-G
6
366.85
61.14
RE
2
166.79
83.40
RI-A
2
203.02
101.51
RI-VAP
2
202.98
101.49
SEC
10
405.18
40.52
USOS
1
77.10
77.10Table 15
TTIA airside occurrence areas RPN list.
Occurrence area
Aggregate RPN
Apron-gate area
414.92
Holding pad
532.24
Taxiway system
974.35
Runway
1968.08
Terminal airspace
763.32Table 16
TTIA airside flight operation procedures RPN list.
Procedure
Aggregate RPN
STD
339.43
PBT
282.97
TXI
1724.78
TOF
450.77
APR
313.25
LDG
1542.42Table14 and Figure 4 show that aerodrome (ADRM), fire/smoke (F-NI), and related security (SEC) are the most 3 frequent risks with occurrence frequency =10, and “ATM” accounts for 14.14% (RPN=658.12) of total risk (RPN=4652.91), while runway incursion-animal (RI-A) is the biggest single risk item (RPN=101.51).Figure 4
TTIA airside risk items-RPN chart.Table15 and Figure 5 show that “runway” is the most risky area in the TTIA airside and accounts for 42% of total risk. The risk ranking of other TTIA airside area is “taxiway system,” “terminal airspace,” “holding pad,” and “apron-gate area” in order.Figure 5
TTIA occurrence areas-RPN chart.Regarding the flight operation procedure where risks occurred, Table16 and Figure 6 show that procedures on taxi (TXI) are the most dangerous stage, accounting for 37% of total risk, followed by procedures on landing (LDG). These two flight operation procedures contribute to 71% of the total risk. The risk ranking of other flight operation procedures in TTIA is takeoff (TOF), standing (STD), approach (APR), and pushback/towing (PBT).Figure 6
TTIA airside operation procedures-RPN chart.Based upon the analysis by risk category, occurrence area and flight operations procedures above, we determine that “RI-A” is the biggest single risk item, “runway” is the most risky area, and “TXI” and “LDG” are the most dangerous stage in TTIA. This result conforms to the overall analysis conclusion that the greatest risk is “runway incursion–animal at runway in the landing procedure” (see Table11).


## 5. Conclusions

A fuzzy logic-based FMECA technique was developed in this paper and applied to analyze a case study of TTIA airside risk using vague, qualitative, or imprecise information. The approach presented resolves the issues of weighting of risk factors and threshold value in risk assessment matrix in traditional methods of risk assessment and conclude that “runway incursion-animal at runway in the landing procedure” is the most critical risk item; “runway” is the most risky area; and “TXI” is the most risky flight operation procedure. We also conclude that risk is unacceptable if its RPN is more than 92.52, and severity is the most critical factor to eliminate the risk.Further studies should be undertaken to analyze the failure mode effects on each risk item in detail and plan the improvement measures according to the importance of decision.



---

*Source: 239523-2013-04-17.xml*