This description was written by a machine and published without a person checking it. It is what the agent made of this grouping, and not a statement anybody has stood behind.
Nancy G. Leveson
A grouping.
Why software kills, and what follows from it: the Therac-25 accidents investigated closely enough to say why, the experimental result that N-version programming does not buy the independence it assumes, and the move from accident to method in a systems-theoretic approach that treats safety as a control problem at the level of the system rather than a reliability property of components. Two of the copies are in the-copy-is-not-the-work -- one is an author manuscript, 36 pages against a declared 21, with no journal furniture -- so neither should be paginated as the published text.
6 references
A systems-theoretic approach to safety in software-intensive systems
Nancy G. Leveson (2004) · IEEE Transactions on Dependable and Secure Computing · IEEE
An Empirical Evaluation of the MC/DC Coverage Criterion on the HETE-2 Satellite Software
Arnaud Dupuy and others (2000) · 19th Digital Avionics Systems Conference · IEEE
System Safety in Computer-Controlled Automotive Systems
Nancy G. Leveson (2000) · SAE World Congress · Society of Automotive Engineers
Identifying Mode Confusion Potential in Software Design
Mario Rodriguez and others (2000) · 19th Digital Avionics Systems Conference · IEEE
Medical Devices: The Therac-25
Nancy G. Leveson (1995) · Safeware: System Safety and Computers · Addison-Wesley
An experimental evaluation of the assumption of independence in multiversion programming
John C. Knight and others (1986) · IEEE Transactions on Software Engineering · IEEE