Fault trees
Fault trees are directed acyclic graphs used in reliability and safety engineering to represent logical relationships between component failures and a top-level system failure event, using gates and leaf events to express Boolean failure conditions for risk analysis.
What Are Fault Trees?
Fault trees are directed acyclic graphs used in reliability and safety engineering to represent the logical relationships between component-level failures and a defined top-level system failure event. Each node in a fault tree is either a gate, which combines the logic of its child events, or a leaf event, which represents an individual failure mode. The structure expresses, in formal Boolean terms, the conditions under which the system fails: the top event occurs if and only if the Boolean combination encoded by the tree evaluates to true for the given set of component states. Fault trees serve as both a communication tool, making failure logic visible to engineers and regulators, and as a computational artifact whose properties can be analyzed mathematically to quantify system risk.
The mathematical foundation of fault trees is Boolean algebra. Each component in the system is treated as a binary variable: healthy (0) or failed (1). The top event is a Boolean function of these variables, and the fault tree is a graphical representation of that function using AND and OR gate primitives. This connection to Boolean functions allows classical results from switching theory and logic minimization to be applied directly to reliability analysis.
Boolean Structure and Minimal Cut Sets
The central structural property of a fault tree is its set of minimal cut sets: the smallest subsets of basic events whose simultaneous failure is logically sufficient to produce the top event. Each minimal cut set corresponds to a prime implicant of the Boolean function represented by the tree, and identifying all minimal cut sets is equivalent to computing the prime implicant cover of that function. Cut sets of size one identify single points of failure with no redundancy protection. Cut sets of size two or larger represent failure modes that require concurrent faults, and the probability of those concurrent faults generally decreases rapidly with cut set size for components with low individual failure rates.
Converting a fault tree to its minimal cut set representation requires Boolean reduction, typically using the laws of idempotency, absorption, and De Morgan's theorem. For large trees with thousands of basic events, binary decision diagrams (BDDs) provide a compact, canonical representation of the Boolean function that supports efficient cut set enumeration. The ScienceDirect overview of fault tree analysis explains how BDD-based tools have largely replaced earlier sum-of-products algorithms for industrial-scale fault trees. Defect control programs use cut set data to prioritize component reliability improvements that eliminate size-one cut sets.
Quantitative Analysis and Probabilistic Extension
When failure rates and component unavailability values are available, fault trees support a full probabilistic analysis. Each basic event is assigned a failure probability over the mission interval, and the top-event probability is computed by propagating these probabilities through the gate logic. For trees without repeated events, this is a straightforward application of the AND and OR probability formulas. For trees with repeated basic events, the inclusion-exclusion principle or BDD traversal corrects for the positive correlation introduced by shared components appearing in multiple cut sets.
Dynamic fault trees extend the static Boolean model by introducing time-dependent gates such as priority-AND gates, which fire only if input events occur in a specified sequence, and spare gates, which model standby redundancy where a backup component takes over only after the primary fails. These extensions capture sequential failure dependencies that standard AND and OR gates cannot represent. Research published through IEEE Xplore on fault-tolerant systems covers both static and dynamic fault tree methods applied to computing and control systems. An accessible primer by the University of Nottingham Resilience Engineering group provides a step-by-step introduction to constructing and analyzing fault trees for safety-critical applications.
Applications
Fault trees have applications in a wide range of fields, including:
- Probabilistic risk assessment for nuclear power plant licensing
- System safety analysis for aerospace and defense programs
- Fault tolerant computing architecture verification, confirming redundancy against cut set enumeration
- Chemical process hazard analysis under IEC 61511
- Medical device risk management under ISO 14971