Oil and gas pipelines play a key role in the safe and efficient delivery of energy resources around the world. Crude oil by itself is not corrosive, but oil extracted from geological reservoirs is accompanied by varying amounts of water and acidic gases such as carbon dioxide (CO2), which can form a corrosive combination. Estimating the corrosion rate and depth in pipelines is essential for predicting their failure probability. In the present study, a Bayesian network has been developed for predicting the distribution of corrosion rate in oil pipelines given the point estimates generated using an empirical corrosion simulation model. For this purpose, the simulation model considers corrosion parameters such as pipe diameter, flow temperature, flow velocity, and CO2 partial pressure, among others. With the corrosion rate distribution predicted by the Bayesian network, corrosion depth–rate relationships have been employed to convert the corrosion rate distribution into failure probability distribution.@en

Major accidents in Western countries, receiving a lot of media attention in the 1970s, are starting point for research into internal and external domino effects in the chemical and petrochemical sectors and clusters. Initially, these reports are published by government institutions and government-related research centers. With the upcoming quantitative risk analyses in the 1970 and 1980s, the so-called colored books, published in the Netherlands, play a prominent role in quantifying these domino effects. Since the mid-1990s, the second European Seveso Directive encourages scientific research on domino effects, shown in substantial growth of academic publications on the topic. Research in Western countries is dominated by risk assessments, probabilities, and failure mechanisms are calculated for the complex phenomenon of domino effects and its consequences. Previous works are closely related to political, official, and private decision-making.@en

The present study aims to investigate the impacts of oil sands development in Canada on the economy, society and the environment as the three pillars of sustainability. Factors such as aquatic ecosystems, land disturbance and reclamation, air quality, public health, safety, aboriginal and local communities, gross domestic product, employment rate and job creation, government revenues and demographic changes have been considered. Based on a review of the available literature, this study shows that the oil sands industry has so far fallen short in keeping a balance among the three pillars of sustainability, with the negative impacts on society (e.g. changing the lifestyle of Aboriginal people) and the environment (e.g. land disturbance) overweighing the relatively positive economic impacts. This, along with the current pace of remedies (e.g. land reclamation), makes it hard to conclude that the oil sands industry is sustainable. @en

Domino effects are high-impact phenomena that have caused catastrophic damage to several chemical and process plants around the world through secondary incidents caused by primary ones. With the increasing trend of cyberattacks targeting critical infrastructures, there is a concern that such cyberattacks may trigger domino effects, by manipulating industrial control systems in such a way that the physical consequences are likely to escalate. In this study, we have demonstrated that via network segmentation of industrial control systems, the plant robustness against cyberattack-related domino effects can be improved. To this end, a risk-based decision-making methodology is developed based on Bayesian network and graph theory to investigate and evaluate the robustness of segmentation alternatives. The application of the methodology to an illustrative case study shows the efficacy of the approach as a viable cyber risk mitigation measure in chemical and process plants.@en

The authors regret that an imprecise statement was made in this article, and wish to offer this Corrigendum as clarification. The authors would like to apologise for any inconvenience caused. Imprecise statement: Misuri et al. (2018, pp. 70) state in their work: “Differently from EN [evidential network], CN [credal network] can be used both to conduct forward analysis and to update probabilities”. This statement implies that EN cannot be used for belief updating and should be mapped into a corresponding CN for that purpose. Correction: The foregoing statement may be correct for conventional ENs that are based on Dempster's combination rule, but does not hold true for the EN developed by Simon and co-workers (2008, 2009) based on Bayesian network (BN) inference algorithms (herein, BN-based EN). Simon and Weber (2009) explicitly mention in their work that the developed EN can be used for belief updating: “The computation mechanism is based on the Bayes theorem, which is extended to the representation of uncertain information according to the framework of Dempster-Shafer theory. Specific evidence (Hard evidence) is modeled by a mass of 1 on one of the focal elements of the frame of discernment. Non-specific evidence (Soft evidence) corresponds to a mass distribution on the focal elements of the frame of discernment.” Proof: Fig. 1 displays the BN-based EN developed in Misuri et al. (2018) for security vulnerability assessment of a process plant where the belief masses have been updated given the evidence “Attack = Success”. Misuri et al. (2018) used the BN-based EN for predicting the probability of a successful attack (forward analysis), but to update the probabilities (backward analysis) they mapped the BN-based EN into an equivalent CN and calculated the updated probabilities given “Attack = Success”. They used two packages, JavaBayes and GL2U, to implement the CN, concluding that JavaBayes results in more consisting updated probabilities with regard to the evidence (the 2nd column in Table 1). In the present corrigendum, we used the BN-based EN (Fig. 1) for belief updating given “Attack = Success”. The updated beliefs were subsequently used to calculate updated probability intervals (the 3rd column in Table 1), showing a good agreement between the results of CN and BN-based EN. Conclusion: The EN developed by Simon and co-workers (2008, 2009) based on BN can be used for belief mass updating the same way BN can be used for probability updating, with no need for using CN.

@en

Recent catastrophic accidents in China and the USA urge and justify a thorough study on current & future research trends in the development of modeling methods and protection strategies for prevention and mitigation of large-scale escalating events or so-called domino effects in the process and chemical industries. This paper firstly provides an overview of what constitutes domino effects based on the definition and features, characterizing domino effect studies according to different research issues and approaches. The modeling approaches are grouped into three types while the protection strategies are divided into five categories, followed by detailed descriptions of representative modeling approaches and management strategies in chemical plants and clusters. The current research trends in this field are obtained based on the analysis of research work on domino effects caused by accidental events, natural events, and intentional attacks over a period of the past 30 years. A comparison analysis is conducted for the current modeling approaches and management strategies to pose their applications. Finally, this paper offers future research directions and identifies critical challenges in the field, aiming at improving the safety and security of chemical industrial areas so as to prevent and mitigate domino effects.@en

The Arctic is known for its abundant reserve of natural resources. Last decade has seen some exploration and production activities in this region. The assurance of safe operations in this region is a critical and challenging task because of the harsh environment, the remoteness of operation sites, the limited infrastructure, and resources available in response to emergent situations, the application of costly equipment and facilities, and the sensitive marine environment. For complex process systems operating in a harsh environment, the scope of conventional risk assessment is not enough because of the highly uncertain environment, and its impacts on equipment performance. Risk assessment needs to be extended to include both the pre-failure and the post-failure phases. Additionally, risk assessment approaches under normal operating, and environmental conditions may not be applicable in the Arctic regions with unique and uncertain characteristics of the harsh environment. Therefore, this study aims to develop a quantitative resilience assessment method for process units operating under Arctic extreme conditions. Dynamic Bayesian network (DBN) is applied to model the probabilistic relationships between causes and effects in a dynamic manner. The proposed method is applied to the resilience assessment of a separator (as part of an oil production system). The proposed approach will help reveal the critical operating parameters under extreme conditions for process units. It also helps identify potential design improvement to enhance process safety.

@en

Success Likelihood Index Model (SLIM) is one of the widely-used deterministic techniques in human reliability assessment especially when data is insufficient. However, this method suffers from epistemic uncertainty as it extremely relies on expert judgment for determining the model parameters such as the rates and weights of the performance shaping factors (PSFs). Besides, given an operation consisting of several tasks, SLIM calculates the human error probability (HEP) by ignoring possible dependencies among the tasks.

The present study is aimed at using Bayesian Network (BN) for improving the performance of SLIM in handling uncertainty arising from experts opinion and lack of data. To this end, SLIM is combined with BN to form the so-called BN-SLIM technique. We demonstrate how BN-SLIM can consider uncertainty associated with the rates of PSFs by using probability distributions. BN-SLIM is also able to provide a better estimation of human error probability by considering conditional dependencies resulting from common PSFs. The probability updating feature of BN-SLIM can be used to identify the PSFs contributing the most to human failure event. The outperformance of BN-SLIM over SLIM is demonstrated via an illustrative example.@en

Global warming and the subsequent increase in the frequency and severity of wildfires demand for specialized risk assessment and management methodologies to cope with the ever-increasing risk of wildfires in wildland-industrial interfaces (WIIs). Wildfires can jeopardize the safety and integrity of industrial plants, and trigger secondary fires and explosions especially in the case of process plants where large inventory of combustible and flammable substances is present. In the present study, by modeling the WII as a two dimensional lattice, we have developed an innovative methodology for modeling and assessing the risk of wildfire spread in WIIs by combining dynamic Bayesian network and wildfire behavior prediction models. The developed methodology models the spatial and temporal spread of fire, based on the most probable path of fire, both in the wildland and in the industrial area.

@en

Major accidents in Western countries, receiving a lot of media attention in the 1970s, are starting point for research into internal and external domino effects in the chemical and petrochemical sectors and clusters. Initially, these reports are published by government institutions and government-related research centres. With the upcoming quantitative risk analyses in the 1970s and 1980s, the so-called öcoloured books’, published in the Netherlands, play a prominent role in quantifying these domino effects. Since the mid 1990s, the second European Seveso Directive encourages scientific research on domino effects, shown in substantially growth of academic publications on the topic. Research in Western countries is dominated by risk assessments, probabilities, and failure mechanisms are calculated for the complex phenomenon of domino effects and its consequences. Previous works are closely related to political, official and private decision-making. A transition towards risk management is still in its infancy. A future transition is necessary to understand initial scenarios as starting points for domino effects.

In India a wake-up call for domino effects occurs in the mid-1990s. Chinese publications on domino effects in the international scientific press appear from the mid-2000s onwards. Due to a rapid industrialisation, the numbers in China country are overwhelming, versus chemical companies, as versus of many major accidents in this sector.

This article will discuss results of research on domino effects, conducted in the period 1966–2018, as well as major determinants of these accident processes. Also present, and future transition in this research domain will be discussed.@en

Quantitative risk assessment (QRA) has played an effective role in improving safety of process systems during the last decades. However, QRA conventional techniques such as fault tree and bow-tie diagram suffer from drawbacks as being static and ineffective in handling uncertainty, which hamper their application to risk analysis of process systems. Bayesian network (BN) has well proven as a flexible and robust technique in accident modeling and risk assessment of engineering systems. Despite its merits, conventional applications of BN have been criticized for the utilization of crisp probabilities in assessing uncertainty. The present study is aimed at alleviating this drawback by developing a Fuzzy Bayesian Network (FBN) methodology to deal more effectively with uncertainty. Using expert elicitation and fuzzy theory to determine probabilities, FBN employs the same reasoning and inference algorithms of conventional BN for predictive analysis and probability updating. A comparison between the results of FBN and BN, especially in critically analysis of root events, shows the outperformance of FBN in providing more detailed, transparent and realistic results.

@en

Success Likelihood Index Model (SLIM) is one of the widely-used methods in human reliability assessment especially when data is insufficient. However, this method suffers from uncertainty as it heavily relies on expert judgment for determining the model parameters such as the rates and weights of the performance shaping factors. The present study is aimed at using Bayesian Network (BN) for improving the performance of SLIM in handling the uncertainty arising from experts opinion and lack of data. To this end, SLIM is combined with BN to form the so-called BN-SLIM technique. We applied both SLIM and BN-SLIM models to a hypothetical example and compared the results. It is shown that BN-SLIM is able to provide a better estimation of human error probability by considering dependencies. The probability updating feature of BN-SLIM in particular makes it possible to use new information to update the prior beliefs about the rates of the performance shaping factors, thus updating the resultant human error probabilities.@en

Security management of critical infrastructures is a complex task as a great variety of technical and socio-political information is needed to realistically predict the risk of intentional malevolent acts. In the present study, a methodology based on Limited Memory Influence Diagram (LIMID) has been developed for the protection of critical infrastructures via cost-effective allocation of security measures. LIMID is an extension of Bayesian network (BN) intended for decision-making, allowing for efficient modelling of complex systems while accounting for interdependencies and interaction of system components. The probability updating feature of BN has been used to investigate the effect of vulnerabilities on adversaries’ preferences when planning attacks. Moreover, the proposed methodology has been shown to be able to identify an optimal defensive strategy given an attack through maximizing defenders’ expected utility. Despite being demonstrated via a chemical facility, the methodology can easily be tailored to a wide variety of critical infrastructures.

@en

Past accident surveys reveal that loading and unloading operations (LUOs) are responsible for 11% of fire-related domino accidents. This study investigates the domino accidents during LUOs in the last two decades and identifies the main causes and features of these domino effects. An index-based approach is proposed to assess these domino effects, measuring the periodic escalation capability of installations. The proposed escalation capability index takes into account the special features being present in these accidents, including the spread of vapor cloud due to delayed ignition, multiple fires caused by vapor cloud explosion (VCE), the quantity variation of hazardous substances, and the change of primary event risk due to operations. From a risk management view, an emergency strategy is proposed to tackle the risk caused by LUOs. Therefore, this methodology can identify the most critical areas with regard to the starting or escalating of domino events during LUOs and support the decision-making of alert levels.

@en

Optimal selection of safety measures (SMs) is a challenging task for safety managers due to its importance, complexity, and incapability of traditional approaches in considering all the aspects of SMs optimal selection. Sophisticated mathematical models can be used to overcome the limitations of traditional approaches. However, setting the objective functions while considering their priorities as well as possible synergistic effects of the SMs on the hazards are still among the main concerns in the development and application of mathematical models.
The present study is aimed at developing a methodology to optimize the SMs selection while addressing the aforementioned challenges and considering both the budget and the risks. To do so, first the Pareto set of the solutions is obtained by NSGA-II technique - a multi-objective genetic algorithm technique - where a lexicographic model is used to select the optimal solution from the Pareto set based on the priority of the objective functions. A pessimistic strategy is used to account for the synergistic effects and the overlaps between the selected SMs.
Two mathematical models are developed to represent different policies in optimal SMs selection in a gas wellhead and surface facility. The results show a notable difference between the two policies, indicating the importance of setting proper objective functions in multi-objective optimization problems. The results also show that the methodology is able to effectively satisfy different safety management policies and constraints with no need for much extra information except the cost and impact of SMs on the hazards’ risk@en

Domino effects triggered by fire can cause extremely severe damages to the chemical and process plants. In the need of a more effective prevention of fire domino effects, the present study focuses on firefighting which has received less attention compared to passive and active fire protection systems. Considering both the vulnerability and recoverability phases during fire domino effects, we have introduced a methodology for optimal identification of firefighting strategies so as to increase the resiliency of process plants in dealing with fire escalation scenarios. The area above the resilience curve (AARC), which is equal to the accumulation of loss of resilience over time, was considered as the metric to identify the optimal firefighting strategies. In other words, the strategy leading to the lowest AARC can be selected as the optimal strategy from a resiliency perspective@en

Chemical industrial parks, being critical infrastructures, are susceptible to domino effects triggered by intentional attacks. Previous research on security risk management has mainly focused on using security measures to prevent intentional attacks, neglecting the effects of safety barriers. Safety barriers are able to reduce the potential consequences and decrease the attractiveness of chemical industrial parks to terrorists who aim to maximize the damage. From a systematic perspective, the potential consequence of intentional attacks is defined as the expected loss which is the sum-product of damage probability and consequence of installations. A consequence-based method including a Dynamic Vulnerability Assessment Graph (DVAG) model is proposed to integrate safety and security resources for reducing the risk of intentional attacks. The DVAG model is developed based on dynamic graphs, considering the effects of security measures, safety barriers, and emergency response. This method can assess the consequences and damage probabilities of possible intentional attacks so as to mitigate the risk via evaluation and allocation of security measures and safety barriers with fast computation speed.

@en

Risk analysis in process systems is very important to design effective strategies for preventing and mitigating potential major accidents. Although conventional techniques as Bow-tie (BT) have widely been used in risk assessment of process systems, they fall short in effectively modelling epistemic uncertainty which is prevailing in risk assessment of process systems. The present study is aimed at alleviating this shortcoming by incorporating fuzzy set theory into BT, developing a so-called fuzzy extended Bow tie (FEBT) model. FEBT, compared with previous fuzzy BT methods, uses the intuitionistic fuzzy numbers and thus provides a more accurate cause – consequence model of accident scenarios. A natural gas transmission network is used to demonstrate the application of FEBT.

@en

Water treatment plants (WTPs) are characterised as complex configurations of repairable and deteriorating components. Previous studies have mainly focused on the average or steady-state availability of such systems while ignoring inherent characteristics like degradation. The current research proposes a two-level hierarchical model for long-term availability analysis of WTPs. To do so, at the component level, a condition-based technique (semi-Markov) or a failure-based technique (non-homogeneous Poisson process) is proposed based on the type and amount of available data while at the system level a reliability block diagram can be used to combine the component-level availabilities. The application of the methodology has been demonstrated on a real case study in the Netherlands.@en

Because of modern societies' dependence on industrial control systems, adequate response to system failures is essential. In order to take appropriate measures, it is crucial for operators to be able to distinguish between intentional attacks and accidental technical failures. However, adequate decision support for this matter is lacking. In this paper, we use Bayesian Networks (BNs) to distinguish between intentional attacks and accidental technical failures, based on contributory factors and observations (or test results). To facilitate knowledge elicitation, we use extended fishbone diagrams for discussions with experts, and then translate those into the BN formalism. We demonstrate the methodology using an example in a case study from the water management domain.@en