Applying STPA to Improve Safety and Reliability of AI-Enabled Systems

April, 2025

The April 2025 tech talk was presented by Timothy Davison

Abstract

This talk explores the application of System-Theoretic Process Analysis (STPA) to enhance the safety and reliability of AI-enabled systems. STPA provides a structured and scalable approach to identifying system-level hazards and analyzing risks in highly complex systems, such as those involving large language models (LLMs). By addressing unsafe interactions and potentially hazardous scenarios early in the development lifecycle, STPA enables the design of safer, more robust AI systems.

The effectiveness of this methodology was tested by implementing STPA on an open-source intelligence (OSINT) tool designed for military intelligence applications. The analysis identified a comprehensive set of unsafe control actions (UCAs) that could lead to critical failures. The UCAs were addressed with targeted safety interventions that enabled risk mitigation and improved system reliability, while also ensuring accurate, responsible handling of critical data. The approach described in this presentation extends beyond this use case, offering a roadmap for applying STPA to enhance safety and reliability in a wide range of AI-enabled systems.

About the Presenter 

Timothy Davison is a data scientist at the Software Engineering Institute (SEI), where he works on developing machine learning and data science solutions for cybersecurity challenges, as well as enhancing the safety and reliability of AI systems through methodologies like System-Theoretic Process Analysis (STPA).

At the SEI, Timothy contributes to projects involving computer vision, large language models, and safety analysis for AI systems in military and defense applications. His work blends technical innovation with a focus on system safety, ensuring advanced AI technologies are robust and secure.

Before joining the SEI, Timothy served seven years as an officer in the U.S. Army, where he gained valuable leadership and organizational skills and was among the first to work at the Army Artificial Intelligence Task Force as a data scientist.

Timothy holds a Bachelor of Science in Computer Science from the Virginia Military Institute (VMI) and a Master’s degree in Data Science from Carnegie Mellon University.

Past Presentations

Rebalancing Agility and Discipline in the Era of AI

The October 2026 Tech Talk was presented by Jeff SchwalbAbstractBackground: For years, organizations building high-stakes, safety-critical software systems relied on rigorous, front-end quality standards. Methods like the Team Software Process℠ (TSP℠) and formal...

Take Control: Exceptional Agile Planning and Tracking

The September 2026 Tech Talk was presented by David TumaAbstractAgile methods have transformed software development, improving customer satisfaction and accelerating speed-to-value. Yet many teams routinely hit an “agile glass ceiling.” If you’ve grappled with missed...

Accelerating DSE: Driving Adoption and Transition at NAVAIR/NAWCWD

The August 2026 Tech Talk was presented by Jennifer Ambrecht and Wendy ChangAbstractWhile the engineering community is increasingly familiar with what Digital Systems Engineering (DSE) is, the true challenge often lies in execution, adoption, and cultural shift. This...

Why Battle-Tested Software Engineering Still Matters in the Age of AI

The June 2026 Tech Talk was presented by Mario BenitezAbstractWhile use of AI in developing and maintaining software is increasing globally, this use is relatively new, and proven practices for using AI effectively are still emerging. There are different ways to use...

The SEA Data Warehouse

The April 2026 Tech Talk announced the availability of the SEA Data WarehouseAbstractThe Data Warehouse Working Group was initiated in September 2022, with the purpose of advancing the state of the practice and the art of software engineering by providing a source of...

Agentic Coding: The Earthquake That Topples the Software Factory

The March 2026 Tech Talk was presented by Larry MaccheroneAbstractThe tectonic plates beneath software development are shifting. They are moving too fast to predict what the landscape will look like when the earthquake hits. Still, we are sure that the coming...

Why Program Increment Estimates Miss: Hidden Variables for Planning

The February 2026 Tech Talk was presented by Dr. Bill Nichols and Dr. Tapajit Dey AbstractWhat is a credible range of dates for when the work in a product increment might finish? Software development work includes many sources of uncertainty, including the size of the...

Lessons from Using LLMs to Check Software Security

The January 2026 Tech Talk was presented by Dr. Mark ShermanAbstractLarge language models (LLMs) like ChatGPT are transforming the landscape of software development and evaluation, although claims of AI replacing programmers are often overstated. This session delves...

Process Isn’t a Four-Letter Word

The November 2025 Tech Talk was presented by David TumaAbstractAgile methods emerged as a direct rebellion against the heavyweight processes of the 1990s. And the Team Software Process (TSP) did too, by brilliantly reimagining process in a lightweight, agile way that...

Agile Strategy: Onward and Upward

The September 2025 Tech Talk was presented by Linda Parker GatesAbstractThis talk describes the application of Agile principles to strategic planning. It explores how applying balanced Agile values — such as prioritizing individuals and interactions, delivering...

Engineering of Complex Systems at NAVAIR: We Must Do More With Less!

The June 2025 tech talk was presented by Jeff SchwalbAbstractAt NAVAIR, we are experiencing a dwindling engineering workforce at the same time that we are trying to meet increasing demands for support to our warfighters. We have a combination of efforts uplifting the...

Victims vs. Victors: Navigating Career Uncertainty with Resilience

The May 2025 tech talk was presented by David VanEppsAbstractSetbacks are inevitable. Travel freezes, budget cuts, hiring slowdowns, layoffs — challenges like these can shake our sense of stability. While we can’t always control what happens, we can control how we...

Drive Improved Holistic Business Results with Lean/Agile Practices

The February 2025 tech talk was presented by Fred KoosAbstractAgile practices have roots in Lean Thinking and the Toyota Production System. These are holistic approaches to improve business results. As the word “Agile” was coined in 2001, the applications were...

Share This