A Multiobjective Decision-Making Model for Risk-Based Maintenance Scheduling of Railway Earthworks

Aged earthworks constitute a major proportion of European rail infrastructures, the replacement and remediation of which poses a serious problem. Considering the scale of the networks involved, it is infeasible both in terms of track downtime and money to replace all of these assets. It is, therefore, imperative to develop a rational means of managing slope infrastructure to determine the best use of available resources and plan maintenance in order of criticality. To do so, it is necessary to not just consider the structural performance of the asset but also to consider the safety and security of its users, the socioeconomic impact of remediation/failure and the relative importance of the asset to the network. This paper addresses this by looking at maintenance planning on a network level using multi-attribute utility theory (MAUT). MAUT is a methodology that allows one to balance the priorities of different objectives in a harmonious fashion allowing for a holistic means of ranking assets and, subsequently, a rational means of investing in maintenance. In this situation, three different attributes are considered when examining the utility of different maintenance options, namely availability (the user cost), economy (the financial implications) and structural reliability (the structural performance and subsequent safety of the structure). The main impact of this paper is to showcase that network maintenance planning can be carried out proactively in a manner that is balanced against the needs of the organization.


Introduction
Traditionally rail infrastructure asset maintenance has been performed retroactively to correct, through replacement or remediation, failed elements. Naturally, this carries substantial safety implications for end-users and financial liability for infrastructure owners [1]. To limit their exposure, infrastructure owners have been trying to move towards more proactive asset maintenance approaches [2][3][4]. Such an approach would allow them to invest money in a prudent, sensible fashion, which maximizes utility and subsequently gives the best return on their investment [5]. Resulting in safer infrastructure which offers greater value to consumers and owners alike with less investment of resources [6]. Unfortunately, it is seldom clear how to most effectively allocate resources to achieve these goals.
Railway networks are a significant global asset, with an estimated 200,063 km of track [7] in the EU alone, 95% of which was built before 1905. Individual structures along these railways, including bridges, tunnels and earthworks, were constructed prior to the advent This paper demonstrates the applicability of MAUT for proactively determining the optimum maintenance schedule of earthwork assets on a network scale. The approach is demonstrated using the Irish Rail network. Multiple performance objectives or goals are considered looking at a range of attributes, failure scenarios and maintenance options. The result is a ranking of a network's earthwork maintenance schedule, in order of maximum return on investment, where the return is based on the tradeoff of multiple performance goals as selected by the infrastructure manager. An example would be to increase the structural safety and availability of a network while minimizing the cost of interventions [25][26][27][28]. It allows for the consideration of environmental impacts and user costs and can easily be augmented further by additional performance goals as they become relevant. It explicitly allows the user to integrate choice and risk preferences.

Stability Assessment of Earthworks
In this section, we present an overview of the safety challenges faced by owners of aging earthworks and set-out a rational methodology to describe earthwork safety using reliability theory.

Slope Stability
The earthworks assets considered in this paper include cuttings; where the line is excavated below the existing ground level in either soil or rock ( Figure 1a); and embankments where the line is carried above existing ground on man-made fill, usually soil ( Figure 1b). Common problems causing instability of slopes are shallow translational landslides caused by high rainfall (Figure 1a,b), rock falls caused by freeze-thaw effects (Figure 1c), and deepseated rotational failures caused by the construction of embankments over weak sub-soils ( Figure 1d). The safety of earthworks is typically determined in a slope stability analysis.
Appl. Sci. 2021, 11, x FOR PEER REVIEW 3 of 19 used to identify and quantify decision-maker and stakeholder considerations about various (mostly) non-monetary factors in order to compare alternative courses of action [24]. Alternatively, the multiple performance criteria can be combined into a so-called utility function, in which all the criteria are brought into a single scale. This paper demonstrates the applicability of MAUT for proactively determining the optimum maintenance schedule of earthwork assets on a network scale. The approach is demonstrated using the Irish Rail network. Multiple performance objectives or goals are considered looking at a range of attributes, failure scenarios and maintenance options. The result is a ranking of a network's earthwork maintenance schedule, in order of maximum return on investment, where the return is based on the tradeoff of multiple performance goals as selected by the infrastructure manager. An example would be to increase the structural safety and availability of a network while minimizing the cost of interventions [25][26][27][28]. It allows for the consideration of environmental impacts and user costs and can easily be augmented further by additional performance goals as they become relevant. It explicitly allows the user to integrate choice and risk preferences.

Stability Assessment of Earthworks
In this section, we present an overview of the safety challenges faced by owners of aging earthworks and set-out a rational methodology to describe earthwork safety using reliability theory.

Slope Stability
The earthworks assets considered in this paper include cuttings; where the line is excavated below the existing ground level in either soil or rock ( Figure 1a); and embankments where the line is carried above existing ground on man-made fill, usually soil ( Figure 1b). Common problems causing instability of slopes are shallow translational landslides caused by high rainfall (Figure 1a,b), rock falls caused by freeze-thaw effects (Figure 1c), and deepseated rotational failures caused by the construction of embankments over weak sub-soils ( Figure 1d). The safety of earthworks is typically determined in a slope stability analysis. Shallow translational landslides are usually triggered by near-surface changes in moisture content. In dry periods negative pore water pressure (suctions) develop in the near-surface soils, which contribute significantly to their overall stability. This suction transient and reduce during periods of rainfall or snowmelt. Assuming an infinite slope failure model, the factor of safety (FOS = capacity/demand) can be calculated as follows: where γ is the unit weight of soil, h the wetting front depth (depth of infiltrated water), the friction angle of the soil φ and α, the slope angle, See Gavin and Xue [29]. In this simplified approach, the effective cohesion and matric suction are combined into the total cohesion, C. The primary mechanism for deep rotational slip failures on railway networks is the presence of soft ground underlying an embankment. As a result, these failures tend to be geographically well-defined (e.g., in peatlands and delta regions) and are not significantly affected by climate hazards. As the depth of this failure mechanism is typically much larger than rainfall-induced failures, the volume of soil involved is much larger. The factor of safety is typically determined assuming a circular failure surface in which the failure surface is divided into a number of vertical slices, and moment equilibrium is considered [30]. The key inputs for the analysis are the slope geometry and shear strength parameters of the soil. The factor of safety of a slope subject to a rotational failure is as follows: where: W i is the weight (kN) of the ith slice, α i is the inclination angle of the base of the ith slice, ∆x i (m) is the ith slice width, c i (kPa) is the cohesion of the soil on the base of the ith slice, u i (kPa) is the pore water pressure at the base of the ith slice, and φ i is the friction angle of the soil at the base of the ith slice, See Figure 2.  Shallow translational landslides are usually triggered by near-surface changes in moisture content. In dry periods negative pore water pressure (suctions) develop in the near-surface soils, which contribute significantly to their overall stability. This suction transient and reduce during periods of rainfall or snowmelt. Assuming an infinite slope failure model, the factor of safety (FOS = capacity/demand) can be calculated as follows: where γ is the unit weight of soil, h the wetting front depth (depth of infiltrated water), the friction angle of the soil φ and α, the slope angle, See Gavin and Xue [29]. In this simplified approach, the effective cohesion and matric suction are combined into the total cohesion, C. The primary mechanism for deep rotational slip failures on railway networks is the presence of soft ground underlying an embankment. As a result, these failures tend to be geographically well-defined (e.g., in peatlands and delta regions) and are not significantly affected by climate hazards. As the depth of this failure mechanism is typically much larger than rainfall-induced failures, the volume of soil involved is much larger. The factor of safety is typically determined assuming a circular failure surface in which the failure surface is divided into a number of vertical slices, and moment equilibrium is considered [30]. The key inputs for the analysis are the slope geometry and shear strength parameters of the soil. The factor of safety of a slope subject to a rotational failure is as follows: where: Wi is the weight (kN) of the ith slice, αi is the inclination angle of the base of the ith slice, Δxi (m) is the ith slice width, ci (kPa) is the cohesion of the soil on the base of the ith slice, ui (kPa) is the pore water pressure at the base of the ith slice, and φi is the friction angle of the soil at the base of the ith slice, See Figure 2. The stability of a rock slope depends on a number of internal (slope angle, geology, fracturing, etc.) and external parameters (weathering, tectonic events, human anthropogenic factors, etc.). The impact of freeze-thaw cycles on rockfalls is well documented, as water infiltrates into existing fractures, freezes and causes expansion of the fracture that may eventually lead to a rock wedge being dislodged from the mass. In this paper, a 2D rock wedge failure mode is considered, where the geometry of the critical failure surface is dependent on the slope geometry [31]. The stability of a rock slope depends on a number of internal (slope angle, geology, fracturing, etc.) and external parameters (weathering, tectonic events, human anthropogenic factors, etc.). The impact of freeze-thaw cycles on rockfalls is well documented, as water infiltrates into existing fractures, freezes and causes expansion of the fracture that may eventually lead to a rock wedge being dislodged from the mass. In this paper, a 2D rock wedge failure mode is considered, where the geometry of the critical failure surface is dependent on the slope geometry [31].

Reliability of Slopes
Because soils are naturally occurring materials, their properties vary spatially and temporally. Therefore, while simple limit equilibrium analyses such as those described in Section 3.1 can be performed to determine the factor of safety against slope failure, many of the input parameters needed for these analyses are highly variable. As a result, the FOS value obtained is critically dependent on assumptions made by the designer. For the case of shallow translational landslides, the specific uncertainties associated with this failure mode include; the variation of total cohesion when suctions reduce as a result of changes in water content during infiltration and difficulties in assessing the rate at which wetting front development occurs. The wetting front or failure surface depth is a function of many variables. These include the initial suction profile (which depends on the grain size properties and antecedent weather), the geometry of the slope and permeability of the soil, rainfall intensity and duration, among other factors. For the rotational failure mechanism, the key uncertainties are the shear strength parameters and the presence of local soft spots or buried features, stresses on the failure plane and location of the slip surface. For rock wedge failures, the key uncertainty relates to the fracture spacing and the impact of freeze-thaw cycles.
Probabilistic analysis offers a rational way for engineers to include uncertainty in their designs [32]. Instead of assuming deterministic (unique) values for variables, the full distribution of likely values is considered. The limit-state (performance) function, which compares the capacity (C) and demand (D), See Figure 3 is given by Equation (3).
The probability of failure is the area of the curve where demand exceeds capacity and the reliability index β is defined as the distance by which the mean or expected value of the performance function exceeds zero in units of its standard deviation, σ (Equation (4). As entire distributions are being used as inputs, reliability can either be determined through brute force computation using Monte Carlo or else approximated using mathematical optimization approaches such as First Order Reliability Methods [33], Second Order Reliability Methods [34], Genetic Algorithm [29], Particle Swarm Optimisation [35,36], etc. This paper utilizes a genetic algorithm approach, as recommended by Xue and Gavin [29], to determine the reliability index.

Reliability of Slopes
Because soils are naturally occurring materials, their properties vary spatially and temporally. Therefore, while simple limit equilibrium analyses such as those described in Section 3.1 can be performed to determine the factor of safety against slope failure, many of the input parameters needed for these analyses are highly variable. As a result, the FOS value obtained is critically dependent on assumptions made by the designer. For the case of shallow translational landslides, the specific uncertainties associated with this failure mode include; the variation of total cohesion when suctions reduce as a result of changes in water content during infiltration and difficulties in assessing the rate at which wetting front development occurs. The wetting front or failure surface depth is a function of many variables. These include the initial suction profile (which depends on the grain size properties and antecedent weather), the geometry of the slope and permeability of the soil, rainfall intensity and duration, among other factors. For the rotational failure mechanism, the key uncertainties are the shear strength parameters and the presence of local soft spots or buried features, stresses on the failure plane and location of the slip surface. For rock wedge failures, the key uncertainty relates to the fracture spacing and the impact of freeze-thaw cycles.
Probabilistic analysis offers a rational way for engineers to include uncertainty in their designs [32]. Instead of assuming deterministic (unique) values for variables, the full distribution of likely values is considered. The limit-state (performance) function, which compares the capacity (C) and demand (D), See Figure 3 is given by Equation (3).
The probability of failure is the area of the curve where demand exceeds capacity and the reliability index β is defined as the distance by which the mean or expected value of the performance function exceeds zero in units of its standard deviation, σ (Equation (4). As entire distributions are being used as inputs, reliability can either be determined through brute force computation using Monte Carlo or else approximated using mathematical optimization approaches such as First Order Reliability Methods [33], Second Order Reliability Methods [34], Genetic Algorithm [29], Particle Swarm Optimisation [35,36], etc. This paper utilizes a genetic algorithm approach, as recommended by Xue and Gavin [29], to determine the reliability index.

Model Description
MAUT is a multicriteria decision-making method [37], based on expected utility theory where the concept of a lottery is used to change the weightings of different attributes to determine the indifference point between different outcomes. The indifference point is the point where the expected values from different outcomes are the same. MAUT allows the decision-maker to strongly influence the preference order through the construction of utility functions, which further allows for the direct consideration of uncertainty. In the maintenance planning process, the uncertainty mainly originates from a lack of data and/or a lack of clear preferences from the stakeholders. These functions are real-valued functions that must be determined for each attribute, where the attributes chosen should represent the characteristics that the decision-maker in question deems important. After defining utility functions for each attribute, objectives and constraints need to be established. If the decisionmaker has a personal preference regarding maximizing or minimizing the influence of a given attribute, relative weights can be ascribed. The individual utility functions are then combined into one utility function using the established relative weightings and any constraints set by the decision-maker. This single criterion is optimized to determine the best course of action. MAUT's primary use is to choose the strategy in situations where a strategy must be implemented, but there is no clear indication of which path is of greatest value [26].
MAUT is a well-structured procedure designed to elicit utility functions from multiple attributes, implement relative weighting, and establish an objective ranking. There are several methods available to model an attributes utility, such as linear, log, exponential, logarithmic and quadratic [38]. In this paper, the exponential utility function [39] is utilized to capture the uncertainty in stakeholder preference and the risk tolerance of the decision-maker for slope maintenance planning, considering object reliability, economy and availability as performance criteria.
The step-by-step application procedure to implement MAUT on multiple objective maintenance planning problems is shown in Figure 4 and discussed in detail below, see Equations (5)-(8):

1.
Assuming that the objectives of the maintenance planning and related attributes have been established, the first step is to compute a single utility function (SUF) for each attribute by applying the exponential utility functions [40,41] as follows: where: where: RT = Risk tolerance. When computing SUF, the scaling constants and RT are cyclically dependent. Equation (9) can be used with the goal seeker function of MS Excel [42] to solve this.
To obtain the exponential SUF, the decision-makers are presented with a lottery question of a maximum value (i.e., Max(x i )) and a minimum value (i.e., Min(x i )) of an attribute. The decision-maker must choose an indifference point between the best and the worst possible values, which is referred to as the certainty equivalent (CE). The average value between the best possible value or the worst possible value is referred to as the expected value (EV). The indifference point chosen by the decision-maker represents his/her attitude towards risk and risk tolerance. An indifference value where CE is equivalent to EV represents risk-neutral behavior. If the value of CE is lower than EV, the decision-maker has a risk-avoiding attitude, whereas the CE value greater than EV shows a risk-taking attitude. Consequently, a risk-avoiding attitude has a positive risk tolerance, while a risk-taking attitude has a negative risk tolerance value [43] (Caballero and Krishnamurthy, 2008). With the consideration of decision-makers' uncertainty in eliciting indifference points, CE, under risk consideration, the final computed utilities of an attribute must lie between U (Max(x i )) = 0, U (Min(x i )) = 1.  When computing SUF, the scaling constants and RT are cyclically dependent. Equation (9) can be used with the goal seeker function of MS Excel [42] to solve this.
To obtain the exponential SUF, the decision-makers are presented with a lottery question of a maximum value (i.e., ( )) and a minimum value (i.e., ( )) of an attribute. The decision-maker must choose an indifference point between the best and the worst possible values, which is referred to as the certainty equivalent (CE). The average value between the best possible value or the worst possible value is referred to as the expected value (EV). The indifference point chosen by the decision-maker represents his/her attitude towards risk and risk tolerance. An indifference value where CE is equivalent to EV represents risk-neutral behavior. If the value of CE is lower than EV, the decision-maker has a risk-avoiding attitude, whereas the CE value greater than EV shows a risk-taking attitude. Consequently, a risk-avoiding attitude has a positive risk tolerance, while a risk-taking attitude has a negative risk tolerance value [43] (Caballero and Krishnamurthy, 2008). With the consideration of decision-makers' uncertainty in eliciting indifference points, CE, under risk consideration, the final computed utilities of an attribute must lie between U ( ( )) = 0, U ( ( )) = 1.
2. The next step is to perform tradeoffs among the attributes in order to find a solution that either maximizes or minimizes the stated performance goals or objectives. These tradeoffs characterize the relative importance of attributes for their defined objectives/performance goals. A direct rating method is applied to determine the weighting factors of the attributes, which is represented in Equation (10).

2.
The next step is to perform tradeoffs among the attributes in order to find a solution that either maximizes or minimizes the stated performance goals or objectives. These tradeoffs characterize the relative importance of attributes for their defined objectives/performance goals. A direct rating method is applied to determine the weighting factors of the attributes, which is represented in Equation (10).
where: k(x i ) = Weighting factor of each attribute i across all alternatives; w(x i ) = weighting assigned by an expert for attribute i for maintenance activity x; w(x i ) = weighting assigned by an expert for attribute i for maintenance activity x.

3.
The next step of the MAUT application is the computation of the aggregated utility of each alternative based on both the computed SUF and the relative weighting factors. For the final aggregation, the multiplicative or addictive form can be used. The additive form requires the attributes to be mutually and preferentially independent. Preferentially independent means that the preferences of one attribute are not dependent on the preferences of another. When attributes are not mutually and preferentially independent, the multiplicative form is used [44]. Here, as the attributes (presented in Section 4.1.2) are found to be mutually and preferentially independent, the additive form is used to compute the total aggregated score of each alternative, see Equation (11): where: U(x) = multi-attribute utility of alternative x; k = weighting factor of each attribute i; U i (x i ) = single-attribute utility of each attribute i for an alternative x.

4.
Finally, maintenance alternatives are ranked based on the magnitude of their aggregated score. The maintenance alternative that contributes most to the realization of the defined objectives is ranked the highest.
There are several successful examples of MAUT in the area of transport infrastructure management. Zavadskas et al. [45] (2008) used MAUT as a means of quality control for bridge construction, Dabous and Alkass [46] (2010) utilized it as the basis for a bridge management system, while Allah Bukhsh et al. [4] (2019) demonstrated the viability of MAUT for network-level bridge maintenance. MAUT also has been used for the reliability assessment of infrastructure design and for inspection and maintenance planning [5].

Safety-Change in Reliability Index Due to an Intervention
In order to estimate the benefit of an intervention (maintenance activity), the difference in reliability index before and after the intervention was used. Utility theory can find the optimal balance between the benefit of increased reliability and incurred costs. The change in the reliability index due to the intervention is defined in Equation (12): where: β 1 and β 2 are the reliability index before and after the intervention, respectively. In this paper, the reliability indices of all individual earthworks on the Irish Rail network were determined based on the approaches described in Section 3. Chowdury and Flentje [47] suggest that for earth slopes outside urban areas, a minimum target reliability index β T = 2.0, corresponding to a probability of failure of 2.23%, is acceptable. Although this reliability index would classify the performance as poor in accordance with [48] USACE, it is consistent with conventional practice in geotechnical engineering [49].
For each asset type, embankment, soil cutting and rock cutting that scored β T < 2, maintenance activities were identified that would provide a given increase in reliability index based on the do the minimum, do medium and do maximum maintenance levels. The intervention rules for soil cuttings and embankments are shown in Table 1 and for rock slopes in Table 2. The unit costs include mobilization and a rate per length of the treated area that should be multiplied by the linear height of the treated area. The duration of the works refers to the length of time in days that the line must be closed for the maintenance activity to be carried out. This has a value of zero if a complete possession of the track (full closure) is not required for works to be carried out. In such cases, speed restrictions are applied to ensure worker safety. The expected lifespan is an estimate of the time until the reliability index degrades back to its initial value.

Economy-Annual Maintenance Cost
The second attribute considered in the model is the object's average annual maintenance cost. Maintenance options were determined based on the slope type and the proposed damage; see Tables 1 and 2. The corresponding maintenance service life was then estimated along with associated mobilization costs and the unit costs associated with certain interventions. Next, the unit cost of maintenance activity is multiplied by the object length it acts over. The maintenance cost is then normalized by the object's intended lifespan to calculate the average annual maintenance cost (AMC), see Equation (13).
where AMC is the average annual maintenance cost.

Availability-User Delay Cost
The final attribute considered in the model is object availability, expressed as user delay costs. Where user delay costs are the costs that are born directly by the users of the rail network as a result of traffic disruptions associated with the construction and maintenance of objects on the network. The maximum speed on the network considered is 160 km/h for passenger trains and 80 km/h for freight trains. However, on certain sections of line and/or for certain types of train, lower maximum speed limits apply. These permanent speed restrictions were determined for the network from Irish Rail [50] (2018).
In order to determine the current impacts of those permanent speed restrictions, the user delay costs were calculated as the difference between time traveled at the current speed and the time traveled at the speed that would be possible if the earthworks were at full operational speed.
The user delay costs (UDC) are calculated in Equation (14) UDC = length reduced speed − length standard speed train f requecy number o f working hours VoT × n (14) where VoT is an average value of time for railway passengers (€ per hour). A value of €32.5 per hour was used [51], and n is the average number of passengers per hour on a weekday.

Case Study
The developed model was applied to the Irish Rail network, see Figure 5, to determine the optimal schedule for asset maintenance. Relevant asset metrics were sourced from Irish Rail; the objective was to be accomplished by minimizing annual maintenance costs and user delay costs while maximizing asset reliability.
The Irish Rail asset database is comprised of 3404 slopes giving details on function, location, average height, slope angle, construction type, drainage, condition scores, damage detail, critical failure mechanism, reliability index and other characteristics. Any assets with a reliability index greater than 2 were deemed to be at low risk of failure and were not considered for maintenance. Similarly, if an asset slope was located at a distance more than twice its height from the track, it was eliminated from the dataset. This left 190 slopes requiring some form of maintenance. The intervention rules described in Section 4 were applied to determine maintenance options, relevant costs, reduced speed, the duration of maintenance, and to estimate the reliability index followed intervention for the asset in question. The related decision attributes, i.e., improvement in reliability index, annual maintenance cost and user costs, were then computed.
As the objectives are conflicting, MAUT was applied to the case study data with a minimization function. As a result, the slope with the lowest overall utility score contributes most to the realization of the objective. The application of MAUT ranks the slopes (i.e., alternatives) into some order based on how well they meet or tradeoff multiple performance objectives. Whichever slope has the lowest overall utility score is the slope that will benefit most from maintenance. The following sections outline the quantification process to compute single utility functions, the weighting factors and overall aggregation scores of the alternatives.
where VoT is an average value of time for railway passengers (€ per hour). A value of €32.5 per hour was used [51], and n is the average number of passengers per hour on a weekday.

Case Study
The developed model was applied to the Irish Rail network, see Figure 5, to determine the optimal schedule for asset maintenance. Relevant asset metrics were sourced from Irish Rail; the objective was to be accomplished by minimizing annual maintenance costs and user delay costs while maximizing asset reliability. The Irish Rail asset database is comprised of 3404 slopes giving details on function, location, average height, slope angle, construction type, drainage, condition scores, damage detail, critical failure mechanism, reliability index and other characteristics. Any assets with a reliability index greater than 2 were deemed to be at low risk of failure and were not considered for maintenance. Similarly, if an asset slope was located at a distance more than twice its height from the track, it was eliminated from the dataset. This left 190 slopes requiring some form of maintenance. The intervention rules described in Section 4 were applied to determine maintenance options, relevant costs, reduced speed, the duration of maintenance, and to estimate the reliability index followed intervention for the

Application of Multi-Attribute Utility Theory (MAUT)
The following sections outline the quantification process to compute single utility functions, the weighting factors and overall aggregation scores of the alternatives.

Assessment of Single Utility Function
Utility functions are inspired by lottery problems wherewith equal probability of obtaining the best or worst possible value; a gambler needs to take a certain risk under uncertainty. We have adopted the convention from [52] to present the lottery question along with the risk preferences of the decision-maker. It is worth mentioning that the utility of an attribute is relative to the decision-maker's choices, which can change over time.
To determine a single utility function, the utility function of all attributes must be computed, i.e., reliability benefit, annual maintenance cost and user cost. The reliability benefit is determined using Equation (12), where the initial reliability is taken from the Irish Rail database, and the final reliability is taken from the row relating to the maintenance activity in question in Table 1 or Table 2. The greater the change in the reliability index, the safer the slope will be. Therefore, the objective is to maximize the reliability benefit while keeping the annual maintenance cost and user cost minimal. Figure 6 presents the lottery set up to elicit the CE (certainty equivalent)/indifference point of increasing the reliability index. Irish Rail database, and the final reliability is taken from the row relating to the maint nance activity in question in Table 1 or Table 2. The greater the change in the reliabilit index, the safer the slope will be. Therefore, the objective is to maximize the reliabilit benefit while keeping the annual maintenance cost and user cost minimal. Figure 6 pr sents the lottery set up to elicit the CE (certainty equivalent)/indifference point of increa ing the reliability index. The expected value (EV) of increasing the reliability index is determined by settin up a lottery question where there is an equal chance of getting the best possible increas in reliability index and the worst possible increase in reliability index. The expected valu is then easily obtained by getting the mean value. In this case, the expected increase in th reliability index is equal to 2.89. Due to the maximization objective, the indifference poin (CE) was chosen to be 2. The risk tolerance (RT) value was calculated by satisfying opt mizing Equation (9). The exponential single utility function of all the maintenance alte natives is calculated by solving Equations (6) Min(x i ) = 1.50 Figure 6. Lottery setup to discern utility values for the benefit of reliability.
The expected value (EV) of increasing the reliability index is determined by setting up a lottery question where there is an equal chance of getting the best possible increase in reliability index and the worst possible increase in reliability index. The expected value is then easily obtained by getting the mean value. In this case, the expected increase in the reliability index is equal to 2.89. Due to the maximization objective, the indifference point (CE) was chosen to be 2. The risk tolerance (RT) value was calculated by satisfying optimizing Equation (9). The exponential single utility function of all the maintenance alternatives is calculated by solving Equations (6)-(8) iteratively, which resulted in Equation (15). Figure 7 describes the change in utility as reliability increases. Due to the conflicting nature of the attributes, the utility scores of the benefit from the reliability index were reversed. Therefore, the slopes which gain the most from increasing reliability will have the lowest utility score. The rationale behind this is to keep better alignment between the attributes as minimum values are preferred in the other two attributes. The value reversal will reduce the maximal values (the largest increase in reliability) into smaller utility scores, as shown in Figure 7 so as to rank them higher in the final minimization function.
Appl. Sci. 2021, 11, x FOR PEER REVIEW 12 of 19 Figure 7 describes the change in utility as reliability increases. Due to the conflicting nature of the attributes, the utility scores of the benefit from the reliability index were reversed. Therefore, the slopes which gain the most from increasing reliability will have the lowest utility score. The rationale behind this is to keep better alignment between the attributes as minimum values are preferred in the other two attributes. The value reversal will reduce the maximal values (the largest increase in reliability) into smaller utility scores, as shown in Figure 7 so as to rank them higher in the final minimization function.  Figure 8 shows the procedure for determining the CE (certainty equivalent)/indifference point for annual maintenance cost (AMC). As with the reliability attribute, the expected value must first be obtained by setting up a lottery problem with the best and worst case. In this case, the expected value was equal to €9672. Assuming that the decisionmaker is willing to spend €7000 each year (CE) on maintaining a critical asset. The Equations (5)-(8) solved iteratively yield the Risk Threshold and AMC scaling constants resulting in Equation (16).  Figure 8 shows the procedure for determining the CE (certainty equivalent)/indifference point for annual maintenance cost (AMC). As with the reliability attribute, the expected value must first be obtained by setting up a lottery problem with the best and worst case.
In this case, the expected value was equal to €9672. Assuming that the decision-maker is willing to spend €7000 each year (CE) on maintaining a critical asset. The Equations (5)-(8) solved iteratively yield the Risk Threshold and AMC scaling constants resulting in Equation (16). Figure 7. Utility plot of reliability benefit. Figure 8 shows the procedure for determining the CE (certainty equivalent)/indiffe ence point for annual maintenance cost (AMC). As with the reliability attribute, the e pected value must first be obtained by setting up a lottery problem with the best and wor case. In this case, the expected value was equal to €9672. Assuming that the decisio maker is willing to spend €7000 each year (CE) on maintaining a critical asset. The Equ tions (5)-(8) solved iteratively yield the Risk Threshold and AMC scaling constants resu ing in Equation (16). (1 By substituting the AMC value for each slope into Equation (16), the utility score all the slopes are computed. Figure 9 presents a plot of annual maintenance cost vers utility where the utility values increase steadily with increasing expenditure. Since t objective is to have minimal AMC, smaller utility sores are preferred.  By substituting the AMC value for each slope into Equation (16), the utility score of all the slopes are computed. Figure 9 presents a plot of annual maintenance cost versus utility where the utility values increase steadily with increasing expenditure. Since the objective is to have minimal AMC, smaller utility sores are preferred. The lottery setup to discern the utility score of user delay cost (UDC) is shown in Figure 10. To evaluate the UDC metrics were needed on passenger numbers, Value of time and line speed. As per Irish Rail, the maximum speed is 160 km/h for passenger trains and 80 km/h for freight trains. However, on certain sections of line and/or for certain types of train, lower maximum speed limits apply. These permanent speed restrictions can be found in Irish . For a railway passenger, the value of €32 per hour was assumed (for further details, see (Barrett and Ramdas, 2018)).
Min(x i ) = 0 p = 1.00 When The lottery setup to discern the utility score of user delay cost (UDC) is shown in Figure 10. To evaluate the UDC metrics were needed on passenger numbers, Value of time and line speed. As per Irish Rail, the maximum speed is 160 km/h for passenger trains and 80 km/h for freight trains. However, on certain sections of line and/or for certain types of train, lower maximum speed limits apply. These permanent speed restrictions can be found in Irish . For a railway passenger, the value of €32 per hour was assumed (for further details, see (Barrett and Ramdas, 2018)).
The lottery setup to discern the utility score of user delay cost (UDC) is shown in Figure 10. To evaluate the UDC metrics were needed on passenger numbers, Value of time and line speed. As per Irish Rail, the maximum speed is 160 km/h for passenger trains and 80 km/h for freight trains. However, on certain sections of line and/or for certain types of train, lower maximum speed limits apply. These permanent speed restrictions can be found in Irish . For a railway passenger, the value of €32 per hour was assumed (for further details, see (Barrett and Ramdas, 2018)). As the objective is to have as low UDC as possible, a CE value of €100,000 is chosen, which is considerably less than the expected value. Assuming risk-avoiding behavior, the RT value of €75,000 is obtained using Equation (8).
By solving the Equations (5)- (8) iteratively, scaling constants of unity were determined for the exponential utility of user delay cost; the updated utility equation is shown in Equation (17). As the objective is to have as low UDC as possible, a CE value of €100,000 is chosen, which is considerably less than the expected value. Assuming risk-avoiding behavior, the RT value of €75,000 is obtained using Equation (8).
By solving the Equations (5)- (8) iteratively, scaling constants of unity were determined for the exponential utility of user delay cost; the updated utility equation is shown in Equation (17).

Attribute Tradeoff
As the goal is to determine the optimum maintenance schedule, which gets the greatest return on investment, the slopes must be ranked based on some performance criteria. As the previously stated performance objectives are conflicting in nature, in that any improvement in the reliability index will result in increased annual costs and user delay costs, tradeoffs among the attributes must occur.
In line with the direct rating method, shown in Equation (10), rates were assigned by experts and used to determine the weighting factors of each attribute. Increasing the reliability was deemed to be twice as important as decreasing the annual maintenance cost or user delay cost, see Table 3.

Attribute Tradeoff
As the goal is to determine the optimum maintenance schedule, which gets the greatest return on investment, the slopes must be ranked based on some performance criteria. As the previously stated performance objectives are conflicting in nature, in that any improvement in the reliability index will result in increased annual costs and user delay costs, tradeoffs among the attributes must occur.
In line with the direct rating method, shown in Equation (10), rates were assigned by experts and used to determine the weighting factors of each attribute. Increasing the reliability was deemed to be twice as important as decreasing the annual maintenance cost or user delay cost, see Table 3. The final step of the application of MAUT is to compute the aggregated utility of each alternative to rank them in an order that contributes the most to the realization of the objectives. Either additive or multiplicative aggregation must be selected depending on whether or not the attributes are preferentially independent of one another. In this case, the performance measures used are dependent on each other, but if a decision-maker states a preference for one attribute, it does not, in turn, fix other attributes, so they are preferentially independent. In other words, a decision-maker can prefer having a minimum annual maintenance cost while preferring the maximum possible improvement in reliability. This preference structure makes the maintenance cost and reliability benefit mutually and preferentially independent of each other. Considering this, the additive form was used to compute the global aggregated score for each alternative, as shown in Equation (11). The smallest aggregated utility score represents the most preferred alternative. Tables 4 and 5 show the ten highest and lowest-ranked slopes along with their attribute values. The top-ranked slopes highlight the decision-makers' tradeoff preferences, with all of them having substantial improvements in reliability. It is important to note that other slopes may have a greater increase in reliability but at an unacceptable cost. The slope which had the greatest increase in reliability ended up being ranked number 20 as the annual maintenance cost was extremely high. While, the slope that had the largestannual maintenance cost did not rank lowest (it ranked 94th), as with the associated intervention would result in a substantial improvement in the reliability index. At the bottom of the table are slopes which had a negligible gain in reliability in combination with high costs.

Conclusions
In this paper, the challenges faced by infrastructure owners managing aged earthworks were identified. Many of the earthworks along prominent European rail networks were constructed in the mid-19th century. Historic levels of under-investment in maintenance and remediation of these assets have left them less resilient to extreme weather events than their modern counterparts. Having identified a number of critical failure modes, a reliability-based methodology was developed to determine an asset's probability of failure and dominant failure mode. A set of treatment options for each failure mechanism was proposed; each option had an associated posttreatment reliability increase and service life extension. The direct treatment cost and user delay cost for each maintenance activity were determined and translated into utility values. Thereafter, a MAUT model was adapted to determine optimum maintenance planning for cutting and embankments on a network level. Such an approach allows infrastructure managers to identify which assets should be prioritized for a given maintenance budget while considering safety, cost and availability objectives. The colors indicate whether a value is beneficial or not, the same below. The methodology is demonstrated on the Irish Rail network. Having established the current safety level using the reliability indices calculated across the entire network, multiple performance objectives or goals were considered looking at a range of attributes, failure scenarios and maintenance options. The MAUT model provides a systematic assessment procedure for making objective uncertainty-based decisions. It can adapt to the needs of the decision-maker by incorporating their preferences into its ranking and can present results in a transparent manner. Three attributes were used in this case study to rank the slopes, which would return the greatest benefit from investment. The increase in reliability index was considered to be twice as important as the other two attributes used in this study, namely maintenance cost and track downtime. The individual scaling factors for all the attributes were determined and aggregated into one single utility function, which was then optimized to determine the optimal schedule. The slope that ranked highest objectively contributes the most to the realisation of the decision-makers' defined goals.
MAUT is a flexible framework that can be modified to accept more or fewer attributes as required and can be used to remove subjectivity from key investment decisions. It explicitly allows the user to integrate choice and risk preferences. Funding: This research was carried out as part of the GoSAFE RAIL project funded by H2020, Shift2Rail Grant agreement ID: 730817. Irish Rail a project partner providing the data.