Tim Kelly, a developer of GSN (Goal Structuring Notation) talks about the origin of GSN, benefits, which industries that are adopting GSN and the future of GSN – interviewed by Michael Jesse Chonoles (An author of UML 2 for Dummies).
What is GSN and what is it for?
Michael: Hello. I am Michael Chonoles, and I am here at OMG meeting in Long Beach, California. I’m here to interview Tim Kelly, one of the developers of GSN. So what is GSN and what does it stand for? and what problems does it solve?
Tim: OK, GSN stands for “Goal Structuring Notation”. And it is a graphical argument notation that allows you to visually represent the elements of an argument, the individual claims, assumptions you are making and the strategies that have been used right down to the evidence that supports your argument.
The problem it’s trying to solve is – the historically that would have been done for things like safety and security by writing narrative reports, so you would write out your arguments and justifications in text. That is okay sometimes but a lot of people complain that we couldn’t see the structure of the argument very clearly, couldn’t see individual claims or assumptions. And it’s often very hard for them to trace from the claims been made right down to the evidences that were actually been used. so its hard for people to discern.
Michael: So it helps you organize your arguments with evidence.
Michael: So who are the people who came up with GSN? and what caused them to think of it?
Tim: Stephen Toulmin. The team comes from the university of York. We have a group of high integrity systems engineering group and a group of us that came up with it. The original inspirations were, first of all very early argumentations so that was a guy called Stephen Toulmin who talked about how to structure informal arguments,
so we used that as one our sources and at the same time in the early 90’s we started to develop GSN that was a little work on goal based requirements engineering so what you see in GSN is, if you like to be very productive fusing the work of argumentation with philosophy of goal based requirements engineering that’s how GSN came about.
Michael: So what industries have been picking up GSN?
Tim: Personal rapid transit system at London Heathrow
Really a whole variety of different industries – in fact it’s growing every day. I keep finding new examples. So it’s been used for aerospace, medical devices, chemical plants and offshore gas platforms. A whole variety. Railways – some of their safety cases
are represented in GSN. Increasingly all around the world as well.
And it came from UK, and its now got applications you can find all over like UK-US joint strike fighter that has a GSN-based safety case.
If you arrive at London Heathrow Terminal 5 and moved around the terminals with the personal rapid transit system, that has a GSN safety case and even some of our really old air craft in UK, like Attila Britain memorial flight that apparently has a GSN safety case as well.
So the number of uses are really huge and wide-variety.
Michael: So I’m likely to have used the system or a device that GSN was involved in making. Often you would have come across one.
Michael: How does GSN change the current industries? Do the users really feel that its improvement for them?
I can say people are really using it to share where they wouldn’t have done before. Now what’s the benefit? The kind of things that engineering folks would say..the benefit is things like comprehension, so easier understanding of their arguments and reducing the time it takes for them to agree the arguments. Often safety cases have to be written by one group of people and accepted by another group of people. So what you want is the cleanest, most efficient way of communicating.
Michael: So the regulators seem to understand and adopted it?
Michael: Yes, I understand that US’s FDA started to look at it.
Tim: Yes. just there are examples since they started asking for assurance cases. There are examples where people use GSN to structure those in a clear way that helps them – they only have limited amount of time to review those safety cases.
Michael: Yea, I know the SysML committee has been thinking about using GSN for two purposes. One is to verify that they’ve met their safety requirements but also to justify design decisions – why they pick this part versus that part two competitors – you always have to document that way using GSN sort of seems very powerful.
Tim: Yes. Could be!