Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems

Too often, systems are designed and then an attempt is made to add safety features or to prove that the design is safe after the fact. Safety has to be designed into a system from the start-it cannot be effectively added on to a mature design. In addition, the increasing use of software is changing...

Full description

Bibliographic Details
Main Authors: Stringfellow, Margaret V. (Contributor), Leveson, Nancy G. (Contributor), Owens, Brandon D. (Contributor)
Other Authors: Massachusetts Institute of Technology. Complex Systems Research Laboratory (Contributor), Massachusetts Institute of Technology. Department of Aeronautics and Astronautics (Contributor)
Format: Article
Language:English
Published: Institute of Electrical and Electronics Engineers, 2011-04-19T16:53:21Z.
Subjects:
Online Access:Get fulltext
LEADER 01819 am a22002413u 4500
001 62231
042 |a dc 
100 1 0 |a Stringfellow, Margaret V.  |e author 
100 1 0 |a Massachusetts Institute of Technology. Complex Systems Research Laboratory  |e contributor 
100 1 0 |a Massachusetts Institute of Technology. Department of Aeronautics and Astronautics  |e contributor 
100 1 0 |a Leveson, Nancy G.  |e contributor 
100 1 0 |a Stringfellow, Margaret V.  |e contributor 
100 1 0 |a Leveson, Nancy G.  |e contributor 
100 1 0 |a Owens, Brandon D.  |e contributor 
700 1 0 |a Leveson, Nancy G.  |e author 
700 1 0 |a Owens, Brandon D.  |e author 
245 0 0 |a Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems 
260 |b Institute of Electrical and Electronics Engineers,   |c 2011-04-19T16:53:21Z. 
856 |z Get fulltext  |u http://hdl.handle.net/1721.1/62231 
520 |a Too often, systems are designed and then an attempt is made to add safety features or to prove that the design is safe after the fact. Safety has to be designed into a system from the start-it cannot be effectively added on to a mature design. In addition, the increasing use of software is changing the nature of accident causation in software-intensive systems and our safety engineering techniques must change accordingly. This article will describe a new hazard analysis technique, called STPA, which is effective on software-intensive systems. An advantage of this technique is that it can be used to drive the earliest design decisions and then proceed in parallel with ensuing design decisions and design refinement. Not only is this approach more effective, but the cost is no more than a more conventional design process and potentially much cheaper. 
546 |a en_US 
655 7 |a Article 
773 |t Proceedings of the IEEE