Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems

Too often, systems are designed and then an attempt is made to add safety features or to prove that the design is safe after the fact. Safety has to be designed into a system from the start-it cannot be effectively added on to a mature design. In addition, the increasing use of software is changing...

Full description

Bibliographic Details
Main Authors: Stringfellow, Margaret V., Leveson, Nancy G., Owens, Brandon D.
Other Authors: Massachusetts Institute of Technology. Complex Systems Research Laboratory
Format: Article
Language:en_US
Published: Institute of Electrical and Electronics Engineers 2011
Online Access:http://hdl.handle.net/1721.1/62231
https://orcid.org/0000-0001-6294-8890
_version_ 1826210766130249728
author Stringfellow, Margaret V.
Leveson, Nancy G.
Owens, Brandon D.
author2 Massachusetts Institute of Technology. Complex Systems Research Laboratory
author_facet Massachusetts Institute of Technology. Complex Systems Research Laboratory
Stringfellow, Margaret V.
Leveson, Nancy G.
Owens, Brandon D.
author_sort Stringfellow, Margaret V.
collection MIT
description Too often, systems are designed and then an attempt is made to add safety features or to prove that the design is safe after the fact. Safety has to be designed into a system from the start-it cannot be effectively added on to a mature design. In addition, the increasing use of software is changing the nature of accident causation in software-intensive systems and our safety engineering techniques must change accordingly. This article will describe a new hazard analysis technique, called STPA, which is effective on software-intensive systems. An advantage of this technique is that it can be used to drive the earliest design decisions and then proceed in parallel with ensuing design decisions and design refinement. Not only is this approach more effective, but the cost is no more than a more conventional design process and potentially much cheaper.
first_indexed 2024-09-23T14:55:14Z
format Article
id mit-1721.1/62231
institution Massachusetts Institute of Technology
language en_US
last_indexed 2024-09-23T14:55:14Z
publishDate 2011
publisher Institute of Electrical and Electronics Engineers
record_format dspace
spelling mit-1721.1/622312022-09-29T11:24:15Z Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems Stringfellow, Margaret V. Leveson, Nancy G. Owens, Brandon D. Massachusetts Institute of Technology. Complex Systems Research Laboratory Massachusetts Institute of Technology. Department of Aeronautics and Astronautics Leveson, Nancy G. Stringfellow, Margaret V. Leveson, Nancy G. Owens, Brandon D. Too often, systems are designed and then an attempt is made to add safety features or to prove that the design is safe after the fact. Safety has to be designed into a system from the start-it cannot be effectively added on to a mature design. In addition, the increasing use of software is changing the nature of accident causation in software-intensive systems and our safety engineering techniques must change accordingly. This article will describe a new hazard analysis technique, called STPA, which is effective on software-intensive systems. An advantage of this technique is that it can be used to drive the earliest design decisions and then proceed in parallel with ensuing design decisions and design refinement. Not only is this approach more effective, but the cost is no more than a more conventional design process and potentially much cheaper. 2011-04-19T16:53:21Z 2011-04-19T16:53:21Z 2010-03 1008-08 Article http://purl.org/eprint/type/JournalArticle 0018-9219 http://hdl.handle.net/1721.1/62231 Stringfellow, M.V., N.G. Leveson, and B.D. Owens. “Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems.” Proceedings of the IEEE 98.4 (2010): 515-525. © Copyright 2010 IEEE https://orcid.org/0000-0001-6294-8890 en_US http://dx.doi.org/10.1109/jproc.2009.2039551 Proceedings of the IEEE Article is made available in accordance with the publisher's policy and may be subject to US copyright law. Please refer to the publisher's site for terms of use. application/pdf Institute of Electrical and Electronics Engineers IEEE
spellingShingle Stringfellow, Margaret V.
Leveson, Nancy G.
Owens, Brandon D.
Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title_full Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title_fullStr Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title_full_unstemmed Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title_short Safety-Driven Design for Software-Intensive Aerospace and Automotive Systems
title_sort safety driven design for software intensive aerospace and automotive systems
url http://hdl.handle.net/1721.1/62231
https://orcid.org/0000-0001-6294-8890
work_keys_str_mv AT stringfellowmargaretv safetydrivendesignforsoftwareintensiveaerospaceandautomotivesystems
AT levesonnancyg safetydrivendesignforsoftwareintensiveaerospaceandautomotivesystems
AT owensbrandond safetydrivendesignforsoftwareintensiveaerospaceandautomotivesystems