  This paper considers the design-phase safety analysis of vehicle guidance
systems. The proposed approach constructs dynamic fault trees (DFTs) to model a
variety of safety concepts and E/E architectures for drive automation. The
fault trees can be used to evaluate various quantitative measures by means of
model checking. The approach is accompanied by a large-scale evaluation: The
resulting DFTs with up to 300 elements constitute larger-than-before DFTs, yet
the concepts and architectures can be evaluated in a matter of minutes.
