Nancy G. Leveson
4 references under this name, matched as it is written. Somebody else may write under it too, and the same person may appear here spelled another way.
Nancy G. Leveson
Why software kills, and what follows from it: the Therac-25 accidents investigated closely enough to say why, the experimental result that N-version programming does not buy the independence it assumes, and the move from accident to method in a systems-theoretic approach that treats safety as a control problem at the level of the system rather than a reliability property of components. Two of the copies are in the-copy-is-not-the-work -- one is an author manuscript, 36 pages against a declared 21, with no journal furniture -- so neither should be paginated as the published text.