#### Abstract

In order to make the risk assessment method of oil wharf handling more reasonable, basic data calibration method more accurate, and assessment findings more objective, the fuzzy weights of the relative probability of basic events are calibrated by ANP decision-making (Analytic Network Process). ANP decision-making is appropriate for reflecting the dependence between the basic events and the feedback relationship. The calibration value is used as the probability value of each basic event. Based on the fault tree model, the relationship between the accidents caused by the Bayesian network is constructed, and the important degree of the basic events is quantitatively evaluated. The case focuses on wharf handling gasoline fire and explosions, using ANP method to calibrate probability, and analyzing and sorting the structural importance, the probability importance, and critical degree of each basic event through forward and backward reasoning. The results showed that the evaluation model can better characterize the effect of the basic events on the top events, which can be targeted to identify security weaknesses in oil wharf handling process. It has some practical significance for finding security risks and improving working conditions and the overall system safety level.

#### 1. Introduction

The number of water transports of dangerous goods has increased by 20% annually over recent decades in China [1], in which oil water transport contributes a lot (or plays an important part). There are great potential risks hiding in oil wharf handling and many potential threats to safety. Once the threats are out of control, accidents such as oil leakage, fire, explosion, and others could happen at any time, causing casualties, property damage, or serious pollution. Therefore, to assess the risk of oil wharf handling process and to identify the key factors that lead to accidents are of great importance to ensure the safe operation at ports.

At present, research papers at home and abroad on risk assessment are easy to find and can be summed up into three categories.

() Assessment methods based on the concept of risk management: risk is the function about probability (frequency) and the extent of loss, which assesses the risk value by calculating the probability of accidents (frequency) and the consequences and then compares the value with risk evaluation criteria so as to identify whether it meets the specified security requirements. In [2], an indicator system is built that measures the accidents consequence and probability of major hazard sources in water transport engineering, through which to determine the risk rating by calculating the risk value.

() Assessment methods based on traditional theory of security systems engineering, such as Fault Tree Analysis, Event Tree Analysis, Risk Matrix, research of danger and operability, probabilistic risk assessment technology, Dow’s chemical fire, and index evaluation of explosion [3]: for example, Cong et al. assessed the risk of maintaining pipelines in petrochemical plants using Fault Tree Analysis [4]. Zhao et al. assessed polypropylene production apparatus qualitatively and quantitatively by applying danger and operability research, combining with Fault Tree Analysis [5].

() Assessment methods based on modern mathematical theories: the main methods of evaluation are AHP analysis, Bayesian network, Fuzzy Comprehensive Evaluation, Artificial Neural Network method, Grey Comprehensive Evaluation, and Monte Carlo Simulation Method. For example, Zhao et al. analyzed the cause of 94 transportation accidents of hazardous articles in China by Bayesian network [6]. Li et al. proposed the risk assessment method, using the fuzzy analytic hierarchy process and the artificial neural network model [7]. Yang et al. bring in the theory of hesitant fuzzy set, combining with the cloud model theory, to construct a hesitant cloud model to achieve the quantitative assessment of human environment risk. And at last an experiment evaluation on the risk of maritime silk road is carried out [8].

The object system of study is complicated; thus, the above evaluation methods also encountered a number of problems while developing rapidly. For instance, the evaluation methods are unable to present the conditional probability relations among different levels and the interrelations of every node; short of database of all kinds of accidents; processing data by expert scoring methods that is not flexible enough and cannot well reflect the dependence and feedback relations among factors; lack of comprehensive studies across evaluation methods; and so on. Therefore, it is believed that establishing a fault tree for oil wharf handling, mapping it onto Bayesian Network, and, meantime, calibrating the probability of elementary event via Saaty’s ANP decision-making method will not only clarify the logic of tree causality clearly and express the conditional probability relations in different layers accurately, but also make the calibration method of probability value more flexible, reasonable, and reliable. Besides, it will be able to quantificationally calculate the structural importance, probable importance, and the critical importance of every elementary event, which can be targeted to identify security weaknesses in oil wharf handling process. It has practical significance for finding security risks, improving working conditions and the overall system safety level.

#### 2. Analysis of Risk Factors

Oil wharf handling risk assessment needs an analysis of risk factors in handling process in the first place. Oil wharf handling mainly involves operations such as berthing, mooring, and (electrostatic) jumper connecting of the vessel, connecting pipelines (or marine loading arm), opening the valve, starting the pump, conveying supplies, turning off the pump, cleaning pipelines, disconnecting pipelines (or marine loading arm), closing the valve, disconnecting the jumper, unmooring, and departure. Each of the above-mentioned operations may have certain risks. For example, when conveying supplies, physicochemical properties of different materials require different delivery pressure, temperature, flow rate, and mix heat. Once these conditions are out of control, a physical or chemical explosion or static electricity accumulation could occur. If cleaning pipelines does not follow operation rules, potential safety risks might therefore appear. In addition, pipes on the wharfs are in a wet and corrosive environment. As a result, if they are not comprehensively inspected or have in-service inspection in time, it might lead to leaking or even fire explosion.

Oil in this paper means petroleum products. Dangerous goods are divided into nine categories according to their dangerousness level or their major hazards [9]. Most oil handled at wharf belongs to the 3rd category of flammable liquids, such as gasoline, aviation kerosene, and crude oil. They are all having a flashing point below 61°C, which identified them as hazardous chemicals of grievous danger [10]. Therefore, inflammability as the inherent attribute of oil is the inner factor that results in accidents. The incentives of accidents can be divided into the natural factors and nonnatural factors. The latter is also known as man-made accidents and will be the research emphasis of this paper while the former is often force majeure. It is currently believed that persons, things, environment, and management are four major risks and harmful factors during production [11]. If operational workers do not loosen or moor the vessel in accordance with operation instruction, they may be injured by cable or fall into water and get drowned. Pipelines may leak due to corrosion or damage for quality reasons. Loopholes or improper implement of security accountability system, security inputs, safety education and inspection, potential safety hazard checking and controlling, allocation of individual protective equipment, and emergency response are all factors that could bring about accidents.

#### 3. Risk Assessment Methods

In other articles Bayesian network and ANP calibration methods combined as a new assessment method have not been used. The following will focus on introducing the concept of Bayesian network and its building methods, ANP calibration methods of probability, and the methods of calculating the importance degree of basic events.

##### 3.1. Bayesian Network

Bayesian network, also known as Belief Networks or Probability Networks, provides a natural method to reflect causality and describe the probability relations among variables. Bayesian network also works as a tool to analyze and reason uncertain events by utilizing the probability theory and graph theory. So far, it is one of the most effective theoretical models in the field of expressing and reasoning uncertain knowledge.

*Definition 1. *Suppose variable is a limited set of discrete variable, and is the joint probability distribution of variable in . Directed Acyclic Graph (DAG) is a Bayesian network of if and only if is the minimal I-map.

*Definition 2. *A Bayesian network is composed of network structure and network parameter : namely, .* J* is a DAG, indicating an independent variable condition in . Nodes in the graph are of one-to-one correspondence relation with variables in* V*, and the directed edge in the graph shows the condition dependency of variables. is the conditional probability distribution connected with every variable.

*Definition 3. *Suppose indicates the descendant node subset of non-, and indicates the direct parent node; then . Given a random set of variables , the Bayesian network will be a joint conditional probability distribution in* V*, and the joint probability of variable is .

Based on the connections between the node and its father node expressed in the above definitions, a function of joint probability distribution that contains all of the nodes can be deduced.

Figure 1 is a simple Bayesian network. A function of joint probability distribution that contains all of the nodes is

The function of joint probability distribution shows the logical relationship among nodes and is the main basis of positive and negative reasoning and quantitative calculation.

##### 3.2. The Building of Bayesian Network for a Fault Tree

A Bayesian network is composed of a DAG and corresponding conditional probability tables. It is a character of Bayesian network to separately demonstrate events and their uncertainty. In such case, to convert the established system fault tree into a Bayesian network based on certain rules. Referring to the probability distribution of fault reasons (basic events) derived from the analysis of fault data, utilizing the belief propagation and updating from above to below of Bayesian network will lead to a more accurate probability distribution of system fault [12, 13]. When mapping fault tree model into Bayesian network, the nodes in the network are corresponding one to one with events in the fault tree, which forms a DAG. The conditional probability relations are decided by the logic gate of the fault tree. Figures 2 and 3 are for the mapping relation of And-gate and Or-gate separately.

##### 3.3. ANP Calibration Methods of Probability

Saaty came up with the core concept of analytic hierarchy process (AHP) as early as the beginning of 1980s. Related published literatures on AHP were very huge and exceeded the other decision-making methods [14]. Although AHP is widely used, the criticism on it never stops. The main argument was that the judgment criteria of AHP were not suitable for the complex human thinking and needed to be fuzzification [15]. At the end of 1990s, in [16–18], the fuzzy AHP was invalid that was responded, and Saaty and Tran proposed the theory and method of Analytic Network Process (ANP) based on wide absorption of the research achievements in fields of decision-making science. ANP replaced hierarchical relationships with network structural ones and took the dependency of elements into consideration and had effectively made up the disadvantages of AHP. It is more flexible, reasonable, and reliable in dealing with decision-making problems and had thus become one of the most practical and effective decision-making methods.

ANP takes the mutual influence of factors or neighboring layers into consideration and makes a comprehensive analysis of the affected factors through hypermatrix to calculate its weight. ANP firstly divides system element into two parts, with the first part being named controlling factors layer. All decision-making guidelines, including the problem target, have been considered to be independent of each other and are subject only to the target element. There can be no decision-making guidelines within controlling factors, but there should be at least one target. The weight of each guideline in the controlling layer can be achieved through traditional AHP method. The second part is the network layer. It is composed of all the elements under control of the controlling layer, with mutually affected network structure inside. The calculation steps of ANP [19] are as follows.

*(**1) Building the Judgment Matrix*. Suppose there are elements in the controlling layer of ANP and* N* elements set of , where set has elements of . Set in as the subguideline and compare the impact of through indirect dominance. Use Saaty’s scaling method from 1 to 9 to quantitatively build judgment matrix and make normalization processing to achieve eigenvector matrix: .

*(**2) Building the Initial Hypermatrix*. After building the judgment matrix, priority vector can be got via characteristic root, and then can be expressed as where the column vector of is the column vector of influence degree that elements in have on those in . If elements are in , then , and the hypermatrix under the guidelines is

*(**3) Building the Weighted Hypermatrix*. hypermatrix’s subblock is normalized, while is not. Every element of compares against the importance of guideline . The ordering weight of element sets which are irrelevant with is zero, and it can reach the weighted matrix:

Then the weighted hypermatrix and .

*(**4) Calculating the Limit Hypermatrix and Determining the Weight Value of Every Element.* The value of hypermatrix ’s element reflects one step dominance that element* i* has over* j*.

Let multiply itself until the product reaches a convergence (each time it multiplies, it needs the column to be normalized once); then it gets the limit hypermatrix whose column vector is the average limit relative ordering vector of elements.

##### 3.4. Occurrence Probability of Top Events

Top events are undesired events (accident or fault). Its occurrence probability is calculated by referring to the fault tree and the occurrence probability of basic events. In the Fault Tree Analysis, it first needs to solve all minimal cut sets (minimal path sets) before calculating the occurrence probability of top events and intermediate events, then using the inclusion-exclusion theorem for precise calculations, or perform approximate calculation through exclusive approximate or independent approximate. In Bayesian network, there is no need to solve cut sets. Joint probability distribution can be used to directly calculate the occurrence probability of top events (*T*) [20]: where node corresponds to the intermediate events and bottom events in the fault tree, represents whether event will occur, and is the number of nodes in Bayesian network.

##### 3.5. Quantitative Analysis of Importance Degree

Quantitative assessment of oil wharf handling risks is based on analysis of the importance degree, which is to analyze the effect degree of every basic event to the occurrence probability of top events. It is an essential mean to provide information for us to modify the system. In Bayesian network, it is easy to calculate the importance degree of bottom events through its reasoning algorithm (e.g., Clique Tree Propagation Algorithm and Bucket Exclusion Algorithm).

() The analysis of structural importance is to analyze the importance degree of every basic event from the perspective of network structure. Namely, to analyze the extent which the basic events will impose on the occurrence probability of top events, without considering the occurrence probability of the basic events, or, in other words, supposing the occurrence probability of all basic events is equal.

Importance degree of structure is as follows:

() The analysis of probability importance is to analyze the importance degree of every basic event from the perspective of probability, reflecting the effect degree of the change of occurrence probability of basic events to that of top events.

Importance Degree of Probability is as follows:

() The critical importance degree measures the importance degree of all basic events from the perspective of sensitivity and the occurrence probability of its own.

Critical Importance Degree is as follows:

##### 3.6. Algorithm

A binary simply connected Bayesian network is plotted through mapping fault tree. To calibrate the basic events by ANP decision-making method, it will be easy to calculate the importance degree of basic events and the probability of top events. The calculation rules are as follows.

*Rule 1. *If event is and connection event is , then , and

*Rule 2. *If event is , , and … and and connection event is , And-gate: , and Or-gate: , andCombined with the rules, steps for quantitative calculations are as follows.

*Step 1. *Map the fault tree onto a Bayesian Network model and calibrating the occurrence probability of basic event as , and then analyze the structural importance. can be calibrated as any value in set (it has no effect on the structural importance).

*Step 2. *Let the occurrence probability of basic event be ; the probability of other events is tentatively set as 0.

*Step 3. *Taking the occurrence probability calibrated in Step 2 as input to update the probability of subnode according to ANP calibration algorithm, .

*Step 4. *, subnode , return to Step 2, and continue to calculate the probability of the next layer. Circulate the step until the occurrence probability of top events is worked out. Let the occurrence probability of this top event be an intermediate output.

*Step 5. *According to formulas (6) to (8) and combining with the occurrence probability of the top event in Step 4, the structural importance, probability importance, and critical importance of all basic events are calculated backwards. These three indicators are the final output and the algorithm ends.

#### 4. Case Study

A fire happens only when combustible, oxidant, and ignition sources are all available at the same time. Lack of any one of them will make a fire impossible; thus they make three necessary elements of fire. As for oil wharf handling, as long as there is ignition source, a fire or explosion might happen once oil leaks.

##### 4.1. Build Fault Tree

This paper chooses gasoline as the object of analysis as it is common goods in wharf handling. Gasoline is a flammable liquid with a low flash point in Section 3.1 category. Its fire risk level is class B [21] with characteristics of inflammable, explosive, evaporable, and it is easy to produce and build up static electricity. And also it is easy to accumulate. If gasoline leaks while oil wharf handling, the leaked gasoline will gradually accumulate to be a liquid pool of certain thickness and dimension. Once ignited by an ignition source, the pool will trigger a pool fire. And if gasoline vapor constantly spreads in the air and the concentration reaches to the explosion limit, an explosion accident will suddenly happen once the ignition source appears.

This paper takes gasoline fire accident and explosion in oil wharf handling as the top event to analyze its risks by building a fault tree model. After a research in port of Dalian, Beibu Gulf, and some other ports in China, one top event, thirteen intermediate events, and thirty-two basic events are chosen as trigger events and impact factors constitute the fault tree. Figure 4 is for the fault tree model, and the letter code and name of all basic events are listed in Table 1.

##### 4.2. Mapping the Fault Tree into a Bayesian Network

According to the mapping method described in Section 3.2, this step is to map the fault tree of gasoline fire accident and explosion during oil wharf handling in Figure 4 into corresponding Bayesian network as Figure 5 shows. The conditional probability table among nodes will be given according to the And-gate and Or-gate in Figures 3 and 4 as described.

In accordance with the logic relation shown in Figure 5, the joint probability distribution function in the Bayesian network of gasoline fire and explosion in oil wharf handling is

##### 4.3. The ANP Calibration of Basic Event in Bayesian Network

The essential data (basic calibration of absolute value [22]) of 32 basic events has to be collected in accordance with the Delphi method. Then to figure out the weight value of basic events, according to the ANP method mentioned, and make it the occurrence probability value of basic events. See Table 2 for part of the probability value.

##### 4.4. Calculating the Importance Degree

Figure out the structural importance according to formula (6) in Section 3.5. Partial probability values are shown in Table 3.

The order for structural importance of basic events is

The value of basic events has no effect on the order of structural importance in terms of the definition of the structural importance. If we only consider the position of basic events in the fault tree structure, and are of the highest importance followed by , while is of the least importance. When managements after fire accidents and explosion in oil wharf handling are considered to improve the safety of the system, projects targeting at and can be arranged first. Another choice is to work out a checklist for fire and explosion in oil wharf handling in accordance with the above structural importance order, in order to check the important items first and to treat them more careful.

The probability importance and the critical importance can be figured out in a similar way. In Tables 4 and 5, there are parts of the results.

The order for probability importance of basic events is

According to the order above, it can be seen that reducing the occurrence probability of basic event could lower the occurrence probability of the top event in a more efficient way than reducing probability of any other basic events. What follows in order is , , , , and , while is the least sensitive one.

The order for probability importance of basic events is

Compared with probability importance, the importance degree of has dropped because of its low occurrence probability, while basic event rises. It is not only because ’s high sensitivity, but also for the high probability of it.

##### 4.5. Summary

Importance degree calculation through Bayesian network can reflect the actual status of things in a more comprehensive way. For example, the value of probability (poorly grounded) is bigger than (external shock from vehicles, machines, etc.), but , which reflects that the value of is bigger regardless of the network structure, probability changes, sensitivity, or the occurrence probability of its own. In real situation of oil wharf handling, there will be machinery operations such as maintenance vehicles and lifting operation. In the past, there were numerous cases where the vehicles and machines crash on pipelines and stands. As a result, the Ministry of Transport released the* Port Safety Facilities Directory* in 2014 and pointed that some anticollision equipment in some areas of the wharf should be set up. Ground connection in oil wharf apparatuses and constructions will exert a tremendous influence on safety, and the current law requires an inspection of lighting protection grounding every half a year, so the influence that has on the network has reduced. From all above, we can see that the Bayesian network has broken the limit that the extent of effect can only be expressed in probability value, which shows its objectiveness and reasonableness.

#### 5. Conclusion

It is rarely seen to assess the risk of oil wharf handling through Bayesian network method. Taking advantage of Bayesian network, this paper maps the fault tree model onto Bayesian network. The problem of quantitative risk assessment of oil wharf handling has been solved effectively both by Bayesian network and ANP decision-making methods, which expands the range of Bayesian network’s and ANP’s application greatly. Main conclusions and prospects are as follows:(1)Replacing the hierarchical relationships with network structural relationships via Saaty’s ANP decision-making methods is the way to calibrate the fuzzy value of relative probability of basic events, which will be the probability value of basic events. This has solved the problem that there are interdependent relationships and feedback among basic events, which is impossible for traditional methods to deal with. This method makes the calculation results more accurate and credible. In the meantime, it makes up for the lack of database of oil wharf handling accidents in China.(2)Building the Bayesian network of oil wharf handling risk assessment model will not only make the tree causality more clear in logic, but also make the expression of conditional probability relations in different layers accurate. Taking advantage of the reasoning algorithm with Bayesian network, it is easy to figure out the importance degree of basic events so as to acquire the importance extent that basic events mean to the occurrence of accidents from various aspects.(3)In the safety assessment of oil wharf handling, a combination of ANP decision-making methods and Bayesian network will give the analysis result more realistic significance and pertinence in finding the weak link in the process of oil wharf handling so as to improve the working condition.(4)Oil wharf handling is a dynamic process. The Bayesian network built in this paper is based on a static logic and static accident mechanism. How to build a dynamic Bayesian network in order to make the analysis of the risk more accurate in oil wharf handling will be the key problem of researches in this area in the future.

#### Competing Interests

The authors declare that they have no competing interests.