topics-in-software-saftey(參考版)
2025-07-27 15:30本頁(yè)面
【正文】 shutdown routines “Wishful labeling” ? People tend to confuse an ideal with its implementation – ., All you need is monitoring and a shutdown routine to have a safe system. ? Need a much greater understanding of the human element: – cognition, politics, social factors, training, ... Workmanship standards ? The early steam engines had low standards of workmanship, and engineers lacked proper training and skills. ? There were more jobs for highlytrained and experienced technologists than there were suitable people to fill them ? What do you think happened? Safety engineering ? There exists a wealth of knowledge and experience outside the realm of software development/engineering. ? Safety engineering defines safety in terms of hazards: – Attack problem of system safety by reducing or controlling hazards. Basic approaches to safety engineering ? Avoidance: Stop hazards from occurring, or minimize their occurrence. – ., If fire is a concern, use nonflammable materials and minimize chance of sparks. ? Disadvantages: – cost – performance Basic approaches to safety engineering (Cont’d) ? Recovery: Control hazards if/when they do occur. – ., sprinklers, fire doors, smoke detectors ? Advantages: – cost, can be added afterthefact ? Disadvantages: – often less safe – cost – performance Safety engineering (Cont’d) ? In practice, a bination of the two is used. ? Each system is different and requires careful analysis of: – risk – design – cost – performance Highpressure steam engines and puter software “As Edison argued with respect to electricity, increased government regulation of our technology may not be to anyone’s benefit。t that much careful, analytical data anyway. ? Infotech is a fastpaced, fadhappy, innovationdriven, big money game. ? There has been little time or money for careful reflection, evaluation, and condensation. Working on engineering foundations ? No one denies that innovation and invention are vital, but we also need to work on the engineering foundations too: – criteria for evaluation – means of parison – theoretical limits and capabilities – means of production – underlying rules, principles, and structure ? We need mathematical models and careful experimentation (realworld validation)! Questioning new methods ? “Formal methods are math. Math is good. Therefore, formal methods will improve software quality.” ? It is not clear that this is true! – What kinds of FM? – Training of practitioners? – Political issues? Costs? Scale? – Tool maturity and appropriateness? – Are resulting systems better? safer? smaller? bigger? more understandable? more opaque? Understanding ? The safety features designed for the boilers did not work as well as predicted because they were not based on scientific understanding of the causes of accidents. ? Something that sounds good isn’t necessarily a good idea.
法律信息相關(guān)推薦
鄂ICP備17016276號(hào)-1