STAMP Workshop Europe 2013

Thank You!

We would like to thank all of our participants and presenters of the first STAMP Workshop Europe 2013.

With more than 68 researchers, practitioners, and consultants we had great workshops, presentations, and talks. Soon we will provide a detailed report of the workshop, which will be published in the ITS Journal. Presentation slides will be available on the PSAS website.

General Information About The Workshop

STAMP is a new accident causality model based on systems theory and systems thinking. Detailed descriptions and applications can be found on Prof. Nancy Leveson's website: In particular her book "Engineering a safer world" is recommended.

The target of STAMP is based on the integration of new causal factors such as human-decision making, organizational design in the hazard analysis. STAMP is divided into two parts. Whereas STPA is a hazard analysis technique based on STAMP, CAST is the equivalent for the accident/incident analysis technique.

After the success of the first workshop at the MIT in 2012, the Institute for Traffic Safety and Automation of the Technische Universität Braunschweig and the Institute of Software Technology of the University of Stuttgart in cooperation with the MIT will held a European STAMP workshop.

We invite practitioners, researchers and consultants to participate in the workshop. The format will be likewise to the previous one at MIT. The session will start with presentations of experiences/lessons learned/challenges in using STAMP/STPA/CAST. Afterwards tutorials based on the different experience levels will take place. Furthermore we would like to do a session on possible joint projects evaluating the application of STAMP in academic and industry projects.


The workshop will be held in the building of the Institute for Machine Tools and Production Technology at the CIM rooms.

Institute for Machine Tools and Production Technology
CIM Room
Street: Langer Kamp 19b
ZIP: 38106 Braunschweig

Parking is available for free outside the institute. If you get to the workshop by public transportation, please leave the bus ( M19, M29, 416,436,443) at the bus stations shown in the map. Or you can arrive by tram and leave at the Bindestraße (M3) station. It is a five minute walk each to the workshop from there.

If you do not find the location, call
+49(0)531-391-3317 (Workshop Secretariat)

(Click to enlarge picture)


22nd May Plenary Session
08:30 Registration
09:00 Welcome (Prof. Schnieder)
09:15 Introduction to STAMP (Prof. Leveson)
10:45 Refreshment Break
11:15 Beginners Tutorial
(Prof. Leveson)
Advanced Tutorial
(Prof. Wagner)
12:00 Lunch
13:00 Hands-On Tutorial for Beginners
(Prof. Leveson)
Hands-On Tutorial for Advanced
(Prof. Wagner)
15:30 Refreshment Break
16:00 Presentations
Martin Rejzek (ZHAW) Evaluation of STPA in the Safety Analysis of the Gantry 2 Proton Radiation Therapy System
Dr. Michaela Huhn (TU Clausthal) STPA in the Product Line Development of edical Cyberphysical Systems
Eleftheria Mitka (University of Thrace) Apply STAMP to Safety Standards of home-surveillance Robots
17:30 Transport to Evening Reception
18:00 Evening Reception at DLR
19:00 Dinner at Il Terrazzo
21:00 Transport back to University and End of Day 1
23rd May Plenary Session
09:00 Presentations
Dr. Birgit Milius (TU Braunschweig) Applying STPA to a railway example - first experiences
Eelco Vriezekolk (University of Twente) Can STPA be used to investigate telecom incidents?
Asim Abdulkhaleq (Uni Stuttgart) Experiences with STAMP in Automotive Industry
Daniel Hartmann, Ph.D. (Ben-Gurion University) DIKC (Data, Information, Knowledge, Context) as fundamental element of STAMP
10:30 Refreshment Break
11:00 Presentations
Dirk Spiegel (TU Braunschweig) Integration of formal methods into CAST
Niu Ru (Beijing Jiaotong University) Railway Accident Analysis Method Based on Risk defense Model
Dr. Howard Parkinson (Railtrainer Pty Ltd) The Use of a Systems Approach to Assessing Railway Safety Management Systems
Dr. Brian Edwards (NDA Regulatory Science Ltd) Guiding Principles of Safety as a Basis for Developing a Pharmaceutical Safety Culture
12:00 Lunch
13:00 Project Workshop
15:00 End of Day 2

What is STAMP?

STAMP is a new accident causality model based on systems theory and systems thinking described in Nancy Leveson's new book " Engineering a Safer World." STAMP accounts for the new causal factors associated with software, human-decision making, new technology, social and organizational design, and increasing complexity. STPA is a powerful new hazard analysis technique based on STAMP while CAST is the equivalent for accident/incident analysis.

For more information, see


April 15 proposals or suggestions for tutorials and other types of sessions

  • Interest in making a presentation
  • Other types of sessions you would like to lead or participate in
  • Additional suggestions for the meeting or other ways you might like to participate.

May 22-23rd
STAMP Workshop

Some Possible Topics for Presentations
(not limited to these)

  • Experiences using STPA and CAST
  • Safety-guided design using STPA
  • Accident analyses
  • Certification and regulatory issues
  • Evaluations and comparisons with traditional techniques
  • Risk management and identifying leading indicators
  • Using STPA/CAST for software-intensive systems
  • Applications to security
  • Tools, processes, and other support for analysis and design using STPA and CAST
  • Management and adoption experiences or challenges


We need to charge a fee of 50 Euros for food, drinks, and the evening reception.