Extended FRAM by Integrating with Model Checking to Effectively Explore Hazard Evolution

Table 5

Potential variability of Activity 7.

Aspects	Variability	Influence on Output
Input	The order by ATC is imprecise	The plane takes the wrong runway
	The order is earlier	The plane takes the wrong runway earlier
	The order is later	The plane takes the wrong runway later
Precondition	The runway is not available	The plane shares the runway with other aircrafts
	The airplane does not fulfill ATC’s taxi instructions	The plane takes the wrong runway
Resource	The crew members are not familiar with the airport situations	The plane takes the wrong runway
	The signal lights and the ground markings on airport are misleading	The plane takes the wrong runway
Control	Alarm system does not work properly	The plane is not prevented from breaking into the wrong runway
Time	Too short	The plane takes the wrong runway earlier
	Too long	The plane takes the wrong runway later