Introduction

Rockfall risk analysis is inherently complex and difficult. Such difficulties derive from several factors: lack of accurate data, strongly site-specific nature of rockfall, difficulty in quantifying and modelling spatial rockfall distribution, quantifying the heterogeneity of vulnerability of different elements at risk and variability in temporal vulnerability (Glade 2003; Crosta and Agliardi 2004; Michoud et al. 2012; Frattini et al. 2008, 2012).

Rockfall risk can be defined as a measure of probability and severity of an adverse effect to health, property or the environment (Hungr et al. 1999; Zhang et al. 2004; Corominas et al. 2005; Fell et al. 2008). Rockfall risk for exposed people can be estimated by the product of three conditional probabilities (annual probability of occurrence, reach probability and temporal–spatial probability) and vulnerability, summed up for all the considered scenarios.

The annual probability of occurrence of a rockfall event, P(L), is modelled in the literature by using historical data in order to assess a frequency of events which can be converted into an exceedance probability by using an appropriate probabilistic model (e.g. Poisson or binomial). Since the frequency is recognised to depend on rockfall volume, frequency–magnitude relationships have been used in the literature (Hungr et al. 1999; Guzzetti et al. 2002a). P(L) may also be determined by establishing relationships with triggering event frequencies (e.g. rainfall, earthquake) with known annual exceedance probabilities. However, because of the different site-specific characteristics, the lack of statistically sound historical inventories and the difficulty to model slope stability along the cliffs, the assessment of probability of occurrence is affected by large uncertainties. Moreover, the conditions responsible for a given landslide frequency in the past may no longer exist, due to climatic or land use changes (Cascini et al. 2005).

The reach probability, P(T|L), depends on the propagation of rockfalls along the slope, and it is controlled by slope surface morphology (e.g. slope gradient, curvature), slope roughness, block material, slope deposit grain size and vegetation (Azzoni et al. 1995; Jones et al. 2000; Crosta and Agliardi 2004). Several approaches have been used to assess rockfall run-out, such as empirical methods (shadow angle or reach angle methods) (Evans and Hungr 1993; Corominas 1996) or mathematical modelling in 2D (Stevens 1998; Jones et al. 2000) or 3D (Guzzetti et al. 2002b; Crosta et al. 2004; Dorren et al. 2006). Empirical approaches are useful for a preliminary estimation of rockfall susceptibility, but they are unsuitable for risk analysis because they do not provide the frequency of blocks passing through each position along the slope, without the introduction of strong simplifications (Copons et al. 2009). Hence, mathematical models are needed for risk analysis. However, large uncertainties exist in computing the trajectory and the arrest of blocks along the slope. These uncertainties are related to the size, shape and mechanical properties of the rockfall blocks; the relevant parameters in the modelling and their variation in space and time, but also the geometrical and mechanical characteristics of the surface material (Azzoni et al. 1995; Agliardi and Crosta 2003; Crosta and Agliardi 2004; Frattini et al. 2012).

The temporal–spatial probability P(I|T) is the probability that the exposed element is affected by the hazard at the time of its occurrence (Fell et al. 2005). It depends on the mobility of the exposed element, and it is usually assessed by assuming an average behaviour of the exposed element (Bunce et al. 1997; Budetta 2004; Michoud et al. 2012), without a discrimination based on season, weather or daylight. For example, for all the vehicles which pass below a single landslide, P(I|T) can be evaluated as the proportion of time in a year a vehicle will be in the path of the landslide (Fell et al. 2005). This approach is suitable for the assessment of expected annual losses but can result in a large underestimation of maximum individual risk for people.

According to the glossary of terms for the risk assessment of the International Society of Soil Mechanics and Geotechnical Engineering (ISSMGE) Technical Committee, physical vulnerability is defined as the degree of loss to a given element or set of elements within the area affected by a hazard (http://140.112.12.21/issmge/tc304.htm). The methods for the estimation of physical vulnerability have been developed and well established for earthquake (e.g. Kappos et al. 2006) and flood risk (e.g. USACE 1996). On the contrary, the quantitative assessment of vulnerability to rockfall is made difficult by the lack of accurate damage data and the inherent complexity of rockfall kinematics and interaction (Agliardi et al. 2009). Vulnerability in rockfall depends on rockfall intensity (e.g. velocity and volume), the relative location of the vulnerable element in relation to the rockfall trajectory and the characteristics of the exposed elements (construction materials, state of maintenance, age). For site-specific vulnerability assessment, Agliardi et al. (2009) simulated the energy of rockfall impacts against each building damaged from velocity values, by means of a numerical back calibration of the event, and got the empirical vulnerability function of kinetic energy (Mavrouli and Corominas 2010). However, the difficulty in assessing rockfall intensity, the lack of data regarding the characteristics of the exposed elements and their potential damage makes the assessment of vulnerability extremely uncertain (Uzielli et al. 2008).

From the above “Introduction”, it is clear that a number of quantities needed for rockfall risk assessment suffer from both epistemic and aleatory uncertainty (Baecher and Christian 2003). Epistemic uncertainty refers to the uncertainty due to the lack of knowledge on a variable. It includes measurement uncertainty, statistical uncertainty (due to limited information) and model uncertainty (Nadim et al. 2005). Epistemic uncertainty can be reduced, for example, by increasing the number of samples or by improving the measurement method and technology (Wang et al. 2012). In rockfall risk analysis, this uncertainty affects the location and volume of the rockfall source, the scale or resolution of the topographic data, the selection for the modelling method and the parameters used for modelling. On the other hand, aleatory uncertainty refers to the natural randomness of a variable. In rockfall risk analysis, aleatory uncertainty affects the topography of the slope and the mechanics property of the rockfall source areas, the latter being dependent on lithology, random distribution of fractures in rock or geological movement experience. Although several authors (e.g. Hoffman and Hammonds 1994; Paté-Cornell 1996; Parry 1996; Merz and Thieken 2005) underline the necessity of keeping the distinction between aleatory and epistemic uncertainty in the analyses, others (Hora 1996; Hofer 2001) observe that sometimes it is difficult to distinguish between the two types of uncertainty, especially when modelling the occurrence or the impacts of extreme physical phenomena, which can be outside our direct experience. In this work, no distinction is made among epistemic and aleatory uncertainties, being strongly connected.

This study is aimed at the following:

  • the identification and quantification of the uncertainties and error propagation in risk analysis;

  • the development of a new approach for the assessment of the uncertainty connected with restitution and friction coefficients in rockfall run-out modelling;

  • the assessment of rockfall risk for people at Feifeng Mountain southern slope, considering different weather conditions.

Methodology

Rockfall risk assessment

In this paper, rockfall risk assessment is based on two risk measures of loss of life (Jonkman et al. 2003). The first is the individual risk (IR), defined, after Bottelberghs (2000), as the probability that an average unprotected person, permanently present at a certain location, is killed due to a rockfall (Fell et al. 2005):

$$ \mathrm{IR}=P(L)\cdot P\left(\left.T\right|L\right)\cdot V $$
(1)

where P(L) is the annual probability of occurrence of a rockfall event in a given magnitude (i.e. volume) class, P(T|L) is the probability for blocks related to a rockfall event to reach the exposed elements (i.e. reach probability), and V is the vulnerability (i.e. expected degree of loss) of a given exposed element.

The second risk measure is a descriptor of societal risk, i.e. the expected value of the number of fatalities per year, in the literature often referred to as the potential loss of life (PLL):

$$ \mathrm{PLL}=P(L)\cdot P\left(\left.T\right|L\right)\cdot P\left(\left.I\right|T\right)\cdot V\cdot n $$
(2)

where P(I|T) is the probability that a given exposed element is at the impact location at the time of impact (i.e. temporal–spatial probability or exposure), and n is the number of exposed people with vulnerability V.

For rockfall study, it is extremely complex to define P(L) value. Assuming that rockfall occurrence follows a Poisson distribution (Crovelli 2000; Straub and Schubert 2008; Frattini et al. 2012), the annual probability of occurrence for rare events can be approximated in practice as the annual frequency, being the numerical difference very small (<5 % for annual frequency of <0.1; Hungr and Beckie 1998). Hence, the probability of occurrence can be derived from a magnitude–cumulative frequency (MCF) distribution of rockfall events. As several authors demonstrated (Hungr et al. 1999; Dussauge et al. 2003; Malamud et al. 2004), this distribution can be described by a power law, as:

$$ \log N\left(M>{M}_0\right)={N}_0+b\cdot \log M $$
(3)

where N(M) is the cumulative annual frequency of rockfall events exceeding a given magnitude, M 0; N 0 is the total annual number of rockfall events with magnitude larger than 1 m3, and b is the power law exponent that should be based on complete local rockfall inventory.

The reach probability for a location, P(T|L) is here evaluated as the ratio of the total number of blocks passing a specified location to the total number of blocks launched in the model (Agliardi et al. 2009). When the considered slope is steep and almost planar (i.e. its topography is neither significantly channelled nor convex), the use of 2D rockfall run-out modelling approaches can be considered appropriate for local-scale analysis. However, 3D effects such as lateral dispersion can be observed even on planar slopes due to the effect of slope roughness (Agliardi and Crosta 2003; Frattini et al. 2012). Moreover, 2D models are easier to calibrate where data available for calibration are scarce. In this work, a lumped mass approach is used to calculate energy, velocity and bounce height of falling blocks along 2D slope profiles. Simulation outputs relevant for hazard and risk assessment are the maximum height and velocity along the slope and the distribution of arrested blocks. For 2D simulation, slope profiles have been extracted from a 3D point cloud derived from terrestrial laser scanning, along lines assumed a priori as the most likely rockfall paths. The calibration of normal and tangential coefficients of restitution and the rolling friction coefficient was performed by back calibration of historical events. For the temporal–spatial probability, P(I|T), the exposed elements considered in this study are people moving in the area potentially affected by rockfalls. The temporal–spatial probability is then calculated using the following equation (after Fell et al. 2005):

$$ P\left(\left.I\right|T\right)=\frac{n}{24}\cdot \frac{L}{1,000}\cdot \frac{1}{v} $$
(4)

where n is the number of exposed elements per day moving in the area threatened by rockfalls, characterised by length L (in meters) depending on the considered rockfall scenario, and v is the average velocity (in kilometre per hour) of the moving elements.

In this study, we focus on the physical vulnerability of human beings to rockfall only. Because of the lack of damage statistics and the scarcity of published studies proposing vulnerability curves (Hungr et al. 1999; Corominas et al. 2005; Agliardi et al. 2009), physical vulnerability is difficult to estimate. We assume that, since the velocity of rockfall is usually too high for people to escape, the vulnerability for walking people could be defined as 1 (e.g. all rockfall impacts on people result in death). For people sailing on the boats, a vulnerability of 0.5 was assumed, since in case of impact, only part of the boat would be destroyed.

Uncertainty evaluation

To calculate how the uncertainty propagates along the risk assessment algorithm and affects the final results, a first-order second-moment procedure has been adopted (Baecher and Christian 2003). The method consists in the truncation of Taylor's series expansion, keeping only the first-order terms. It provides an estimate of the mean and the variance (first two moments) of the output through computation of its derivative to the input at a single point (e.g. in Baecher and Christian 2003; Uzielli et al. 2008). The first-order approximation of uncertainty for Eq. 2, aimed at the calculation of PLL, leads to:

$$ 1+{\varOmega}_{\mathrm{PLL}}^2=\left(1+{\varOmega}_{P(L)}^2\right)\left(1+{\varOmega}_{P\left(\left.T\right|L\right)}^2\right)\left(1+{\varOmega}_{P\left(\left.I\right|T\right)}^2\right)\left(1+{\varOmega}_V^2\right) $$
(5)

where Ω is the coefficient of variation, defined as the ratio between the standard deviation (σ) and the expected value (μ) of the variable.

In this paper, the assignment of Ω values for random variables was performed in different ways. For the coefficients of variation of rockfall run-out parameters (i.e. coefficients of restitution and rolling friction), a specific semi-quantitative methodology was developed. In other cases (e.g. for the number of exposed elements, n, and for their velocity, v), the assignment of Ω values relies on statistical data. Otherwise, for the annual probability of occurrence, vulnerability and the reach probability, Ω values were assigned according to expert knowledge, since the values proposed in the literature for random variables in risk assessment (e.g. Harr 1996; Merz et al. 2004; Kaynia et al. 2008) were adaptable only to the specific case studies. Uncertainty, in fact, is strictly related to the intrinsic characteristics of each phenomenon and to the level of knowledge of the system.

Case study

The large underground mines of Feifeng Mountain, located at Zhejiang Province (E China, Fig. 1), were excavated in tuffaceous rocks to obtain building stones in the ancient China. At the toe of the southern mountain slope, the Yongan River provides a river drifting tourist resort. Because of steep terrain and the occurrence of weak rock masses (i.e. weathered tuffs with thick soft layers) damaged by ancient mining practices, the area is seriously affected by rockfalls threatening human life.

Fig. 1
figure 1

Study area location and topographic map of the Feifeng Mountain southern slope, with profiles used for simulation and tourist tracks along the study area

The study area lies at the contact between Upper Jurassic and Upper Cretaceous volcano-sedimentary units (Fig. 2) (RGSTZJ 1978). The Upper Jurassic units are dominant in the area and composed of cinerite tuff, locally with angular gravel and sandstone. The Upper Cretaceous units, composed of amaranth, silicic tuff, locally with sandstone and conglomerate, outcrop nearby the bank of Yongan River. Holocenic alluvium, mainly consisting of loose gravel and sandy clay, also outcrops along the Yongan River. Considering the southern slope of the Feifeng Mountain where the ancient caves are located, we observe the presence of a soft muddy limestone layer separating different tuffaceous units. The thickness of the soft layer is about 15 m and plays an important role in the stability of the slope (Fig. 2). Three main faults control the structural setting of Feifeng Mountain (Fig. 2): a thrust-compressional fault, with dip of 70° to 80° and dip direction of 300°; a NW fault, with dip of 75° to 85°and dip direction of 210°; and a EW fault near Feifeng Mountain.

Fig. 2
figure 2

Study area geology. a Regional geological setting, b typical lithological profile of the Feifeng Mountain southern slope (profile 2) with position of the underground cave

The detailed geometry of southern slope (Fig. 3) was obtained by using the Leica ScanStation 2 terrestrial laser scanner (TLS). The survey was performed from the toe of the cliff at a distance of about 100 m, with an accuracy of 6 mm at 50 m and a point density between 5 and 10 mm, depending on the distance between the scanner and the surveyed points (Fig. 3). TLS provided a 3D point cloud that was used for 2D modelling profile extraction and rock mass characterization (Fig. 3).

Fig. 3
figure 3

Feifeng Mountain southern slope. a Photo from the south-western side of the study area, b 3D points cloud collected through a terrestrial laser scanner

Risk analysis

Identification of rockfall source

The rock mass forming the studied slope was characterised by identifying 57 daylighting discontinuity planes using the TLS point cloud and the software COLTOP 3D (Jaboyedoff et al. 2007). Discontinuities cluster in five main joint sets (Fig. 4) statistically characterised in terms of their mean vector orientations (poles) and dispersion (angular variability limits corresponding to 2 and 3 standard deviations, respectively, according to Priest 1985). Discontinuity persistence ranges between 2 and 15 m, and the aperture is tight to open (from 1 mm to 10 cm).

Fig. 4
figure 4

Kinematic slope stability analysis for main joint sets (the poles in pink area): a toppling, b plane sliding and c wedge failure

A kinematic analysis of feasible modes of failure, generated by critical joint sets, allowed to outline the expected rockfall source areas on the cliff and to constrain potential volume scenarios. Basic failure modes are controlled by five main joint sets, allowing for toppling (joint set 4), planar sliding (joint sets 1 and 2), and wedge failure (joint sets 2 and 3).

Site investigation and ground truth allowed detecting field evidence of block instabilities corresponding to critical failure modes within the source areas identified by geomechanical site characterization. In particular, three blocks (A, B and C) were recognised as most probable rockfall sources (Fig. 5). The stability of block A is controlled by joints 1 and 5. The stability of block B is controlled by joints 2 and 5. The stability of block C is controlled by joints 1, 4 and 5. Moreover, a database of more than 60 blocks corresponding to past rockfall events measured on the surface of the southern slope was prepared.

Fig. 5
figure 5

Main characteristics of unstable blocks A, B and C used for calibration and their profiles shape

Annual probability of occurrence, P(L)

To define P(L) by means of MCF relationships, block volume data collected in the field have been used. Since the historical database for smaller blocks is probably incomplete, only 27 blocks with a volume larger than 1 m3 were used to set up the MCF curve. The resulting curve shows a power-law behaviour at magnitude greater than 1 m3 with a power-law exponent equal to −0.625 (Fig. 6). Based on historical records, excavation of the caves ended up about 200 years ago. This time constraint was assumed as the time interval during which the 27 rockfall events happened. Hence, the parameters N 0 and b in Eq. (2) were defined as 0.135 (27/200) and −0.625, respectively. The annual exceedance probability of the three blocks was therefore calculated, on the basis of the MCF curve, as P(L)A = 0.043, P(L)B = 0.072 and P(L)C = 0.019. Considering the large uncertainties in the procedure adopted for defining P(L) (e.g. completeness of the inventory, selection of the time frame for frequency calculation, MCF parameterization), large uncertainty values, Ω, were assigned to P(L), corresponding to 0.2, 0.3 and 0.2 for blocks A, B and C, respectively. The Ω value for block B is assumed to be higher because of the smaller size of the block, which makes larger the uncertainty related to the adoption of MCF relationship.

Fig. 6
figure 6

Magnitude–cumulative frequency curve for rockfall events occurred in the study area (N = 27) over a 200-year period. Annual exceedance probabilities for the three most unstable blocks are reported

The reach probability, P(T|L)

The run-out distance, bounce height and velocity of the three blocks (A, B and C) were simulated along the 2D slope profiles by Rocfall™ (Rocscience, Inc. 2002). This simulation model is based on a kinematic (lumped mass) approach for trajectories calculation (Stevens 1998). The energy dissipation by bouncing and rolling is simulated by using empirical restitution coefficients and rolling friction angle (Stevens 1998). The model provides as output values of velocity and bounce height for any point along a predictive slope profile and the locations of arrested blocks. Among the parameters used in the model, the slope profile geometry and the coefficients of restitution and friction are the most significant. The former was acquired on the field by using a TLS. The other parameters were obtained by back calibrating two historical rockfall events. For this reason, the slope was initially divided into four sectors based on superficial lithology and material: tuff, muddy limestone, debris talus and river. Then, the coefficients of restitution and friction have been assigned to each sector by back calibration of the historical events (Fig. 7, Table 1). The same parameter values have been assigned to slope profiles of rockfall scenarios A, B and C.

Fig. 7
figure 7

Slope profile, sectors and rockfall trajectories used for the back calibration of the two historical events

Table 1 Mean values for slope parameters resulting from back calibration of past events

To account for the uncertainty related to restitution and friction coefficients, the simulation was performed with a stochastic approach that allows, at each impact, to randomly sample, the value of the parameter from a normal distribution with given mean and standard deviation. The standard deviations of coefficients of restitution and friction are normally defined by an expert knowledge (Wang et al. 2012). Given the importance in the selection of appropriate and non-arbitrary values of standard deviations, a semi-quantitative methodology was developed.

This methodology is based on the degree of difference between the topographic and physical characteristics of a given slope profile to be used for 2D rockfall prediction and those of a reference profile used for parameter calibration; higher diversity is likely to correspond to higher uncertainty about rockfall run-out parameters. The diversity is assessed for a few factors controlling the rockfall dynamics: slope shape, slope materials, source of area position along the slope, shape and size of the blocks (Table 2).

Table 2 Diversity scores assigned to the slope profiles associated to each potentially unstable blocks A, B and C (Fig. 5). The diversity scores are as follows: 1 = very similar, 2 = similar, 3 = slightly different, 4 = different and 5 = very different

The methodology involves four steps of evaluation:

  1. 1.

    for each ith slope profile to be used for predictive modelling, comparison with the reference slope profile and assignment of the diversity score for each controlling factor is accomplished;

  2. 2.

    weighting of the controlling factors by means of the analytic hierarchy process (AHP);

  3. 3.

    calculation of a weighted sum of all the controlling factors to assess the index of diversity for each slope profile, D i ;

  4. 4.

    transformation of D i into Ω values.

For each model profile, the similarity between these factors and those characterising the reference profile has been expressed by assigning a diversity score ranging from 1 to 5 (Table 2).

As an example, block A presents a slope profile with the same material as the reference profile (slope material diversity score of 1) and a similar shape (slope shape score of 2). The characteristics of the block are slightly different (block shape score, 3; block location, 3; and block size, 3) as illustrated in Fig. 5.

Controlling factors are then weighted by using the AHP (Saaty 1980; Saaty and Vargas 2001; Nefeslioglu et al. 2013). Numerical scores are assigned by means of subjective judgement on the relative importance of each factor, by the construction of an AHP pairwise comparison matrix. In this matrix, each factor is rated against the others by assigning a relative dominant score between 1 (equal dominance) and 9 (strongly dominant) (Table 3). The maximum eigenvalue (λ max) of the AHP pairwise comparison matrix and its corresponding eigenvector provide the weights of the factors. To quantify the consistency and reliability of AHP pairwise comparison matrix, the consistency ratio (CR) was calculated. A CR lower than 0.1 is normally acceptable (Ayalew et al. 2004), although this depends on the objective of the study (Wang et al. 2013). In this study, a CR of 0.03 was obtained.

Table 3 AHP pairwise comparison matrix for calculating weights. The rating of comparison is the following: 1 = equal, 3 = moderately higher, 5 = higher, 7 = strongly higher and 9 = extremely higher. Values 2, 4, 6 and 8 are intermediate values. Consistency ratio is equal to 0.03

The diversity index of potentially unstable block i (i = A, B, and C) is calculated as the weighted sum of the diversity scores:

$$ {D}_i={\displaystyle \sum_j{d}_{i,j}\cdot {w}_j} $$
(6)

where d i, j is the diversity score of the unstable block i for the controlling factor j, and w j is the weight of controlling factor j. For example, the calculation of D A leads to D A = (1 × 0.46) + (2 × 0.24) + (3 × 0.08) + (3 × 0.05) + (3 × 0.17) = 1.8

To assess Ω, a linear relationship between D and Ω is proposed, allowing to rescale the values of index D in Ω values ranging from 0 to 1 (Fig. 8). Finally, from the Ω value, the standard deviation of restitution and rolling friction coefficients are obtained (Table 4).

Fig. 8
figure 8

Linear relationship between Ω and D values

Table 4 Statistical parameters (mean, μ; standard deviation, σ) of normal distribution of coefficients used in the simulation for blocks A, B and C

The simulation of rockfall propagation was performed for each unstable block using the model parameters presented in Table 5.

Table 5 Model parameters used in the simulation of rockfall propagation

The distribution of the arrested blocks was used to assess the reach probability as the percentage of blocks that stop uphill to a certain location along the slope. Based on the results of the models (Figs. 9 and 10), the reach probabilities of block A in correspondence to track 1, track 2 and the river bank (Fig. 3) are 0.96, 0.095 and 0, respectively; for block B, 0.998, 0.58 and 0, respectively; and for block C, 0.977, 0.551 and 0.056, respectively.

Fig. 9
figure 9

Rockfall simulation for potentially unstable blocks. a, c, e Rockfall trajectories. b, d, f Plots representing the percentage of arrested blocks, bounce height, translational velocity and total kinetic energy as a function of the distance from the source area along the slope

Fig. 10
figure 10

Cumulative frequency of the arrested blocks and reach probability as a function of the distance from the source area for the potentially unstable blocks A, B and C

The uncertainty associated to reach probability is explicitly considered within the stochastic simulation of rockfall run-out. For this reason, only a small residual uncertainty (Ω = 0.1) is associated to the reach probability, P(T|L), of the three potentially unstable blocks.

Temporal–spatial probability, P(I|T)

In the study area, two groups of exposed elements are considered significant: (1) the tourists visiting the underground caves in Feifeng Mountain, moving along the two existing tracks (Fig. 1), and (2) the tourists drifting in the Yongan River (Figs. 1 and 3), which are, by far, the most numerous. The record of visitors to the area was provided by the administrative department for river navigation tourism and shows that the temporal–spatial probability for the tourists is strongly affected by weather conditions. This is especially true for the second group, because the number of tourists drifting in the Yongan River increases greatly during dry days and dramatically decreases during rainy days. From local rainfall records, it can be observed that the months with heavy rainfall are June, July and August, for a total of about 90 days. Considering the characteristics of groups 1 and 2, it was possible to calculate the temporal–spatial probability (Table 6) based on Eq. (4). In this formulation, the large uncertainties derive from the number of exposed elements, n, and the transit velocity of the elements at risk, v. The uncertainty is strictly related to the characteristics of each site-specific phenomenon and the quality of the available data. The assignment of Ω values was performed based on the statistic information given by the local administrative department for river navigation tourism and a statistic analysis on velocity of boats drifting in the river (Table 7).

Table 6 Parameters for the calculation of temporal–spatial probability for 14 potential risk scenarios; n = number of people along track 1 or 2, number of boats along the river; L = estimated length of the endangered sector along tracks and river; v = velocity of the people along track 1 or 2, velocity of the boat along the river
Table 7 Rockfall risk calculation. P(L), annual exceedance probability of rockfall occurrence; P(T|L), reach probability; P(I|T), temporal–spatial probability; IR, individual risk in terms of annual exceedance probability; PLL, potential loss of life in terms of annual expected number of deaths; Ω, coefficient of variation

Vulnerability, V

Evaluating the expected damage to each exposed element is a difficult and uncertain operation. Due to the large volume and expected velocity of potential blocks (Fig. 9), the vulnerability of the tourists is assumed as 1; in case of impact, the person would die. As shown in Figs. 9 and 10, only block C has the possibility to reach the river, where the exposed elements are the tourists on the drifting boats. For risk calculation, eight tourists for each boat were considered on average, and a vulnerability of 0.5 was assumed; in case of impact, only part of the boat would be destroyed, thus allowing half of the people to survive. Giving the large uncertainty associated to this vulnerability value, we assigned a coefficient of variation (Ω) equals to 0.5.

Rockfall risk to people

By adopting Eqs. (1), (2) and (5), the IR and the PLL and related uncertainties have been calculated for each rockfall scenario at three different locations along the slope (track 1, track 2 and river) (Fig. 1, Table 7).

Risk evaluation

The values of IR (Table 7) are significantly above the limit defined by the tolerability line (10−5 per year for new developments, 10−4 per year for existing developments) for non-volunteer risk such as rockfalls, as proposed by Geotechnical Engineering (1998). This means that in the study area, the individual risk is not acceptable, and some actions are requested in order to lower the risk. It must be considered that a passive countermeasure is already present at the toe of the slope (Table 2), and it was not taken into account for risk assessment.

Regarding the societal risk, the following scenarios have been analysed: one person was killed by blocks A, B and C at tracks 1 and 2 during dry or rainy days, and eight people were killed by block C along the river during dry or rainy days. In order to plot the societal risk as F–N curve, the annual exceedance probability of each scenario and the number of deaths were extracted from PLL and used as coordinates in the F–N chart. Then, the F–N curve was built up by summing the different scenarios (Fig. 11). The F–N curve for societal risk falls within the as low as reasonably practicable (ALARP, Smith 1990; HSE 1992) between the objective and the limit thresholds for acceptability defined for Hong Kong by Geotechnical Engineering (1998) (Fig. 11). Considering the uncertainty (Table 7), the societal risk could be higher or lower than the mean value shown in Table 7, but still within the ALARP zone.

Fig. 11
figure 11

F–N curves for rockfall societal risk considering all scenarios. Scenarios s10, s11 and s12 are not in the plot, because the number of people at risk is equal to 0 (see Tables 6 and 7)

Discussion and conclusion

The overall societal risk calculated summing up the different scenarios (Fig. 11), also considering the related uncertainties, lies within the ALARP zone and therefore requires some mitigation actions to be taken in order to reduce the risk level. These could include the following:

  1. 1.

    Engineering countermeasures to reduce the frequency of rockfall. For instance, the possible unstable blocks could be investigated and removed in advance. Alternatively, since the instability of the three most critical blocks is controlled by apparent joints, rock bolting can be used to stabilise them.

  2. 2.

    Actions to reduce the rockfall run-out. In the study area, the most effective remedial measures may be a retaining wall or an elastoplastic barrier to protect the river bank. Considering the water level fluctuations, the optimal position for these works could be 3 m away from the river bank (Fig. 3). The dimensioning of the retaining wall/barrier could be done based on the behaviour of block C, considering a lateral dispersion of rockfall trajectories, which will determine the length of the countermeasures. Lateral dispersion can be assumed from literature values (e.g. 20° according to empirical observations, Bozzolo and Pamini 1986; Evans and Hungr 1993; Azzoni et al. 1995) or explicitly modelled by using 3D simulation models (Volkwein et al. 2011; Frattini et al. 2012). Besides retaining wall/barrier, forest management can be used to reduce the rockfall run-out. On site survey revealed that at least 12 fallen blocks were stopped by trees along the slope. The plantation of new stronger trees on the southern slopes of Feifeng Mountain could efficiently protect the Yongan River.

  3. 3.

    Actions to reduce the probability of tourists being below a rockfall when it occurs. Since the two tracks on the southern slope are not strictly needed for visiting the underground caves, it is suggested to close them.

The uncertainty about the estimated rockfall risk, expressed as 1 standard deviation, ranges between 48 and 132 % of the mean value. Hence, the error rate can be extremely high, depending on the large uncertainties in the estimation of the onset probability and the temporal–spatial probability. These results demonstrate the importance of accounting for uncertainty in rockfall risk modelling. For scientists, this provides a tool to identify potential needs for the improvement in data collection, in order to decrease the uncertainty. For instance, from our analysis the assessment of the temporal–spatial probability is the most critical and uncertain step of the risk analysis procedure. Hence, a better monitoring of the movement of people at risk needs to be implemented. For administrators and decision makers, accounting for the uncertainty could be extremely important to have an evaluation of the degree of confidence of the results to be used for the implementation of mitigation actions.