[SystemSafety] Looking for information about safety-critical software faults in road vehicles
Ferrell, Uma D.
uferrell at mitre.org
Wed Aug 22 14:16:37 CEST 2018
FAA has a searchable archive of a combination of safety data bases- Aviation Safety Information And Sharing (ASIAS). Each of these databases are searchable. There are also studies that have been conducted on specific issues.
https://www.asias.faa.gov/apex/f?p=100:1:::NO:::
-----Original Message-----
From: systemsafety <systemsafety-bounces at lists.techfak.uni-bielefeld.de> On Behalf Of Peter Bernard Ladkin
Sent: Wednesday, August 22, 2018 7:48 AM
To: systemsafety at lists.techfak.uni-bielefeld.de
Subject: Re: [SystemSafety] Looking for information about safety-critical software faults in road vehicles
MITRE WARNING: Do not open unexpected password-protected attachments.
>>>Email originates from a non-MITRE system. Use caution.<<<
On 2018-08-22 10:50 , Peter Bishop wrote:
>
> A better source might be airworthiness directives (AD). These are
> fixes to aircraft systems mandated by organisations like the FAA in
> response to reported incidents (i.e. present a risk to flight safety).
I agree. They are also just in two places (FAA and EASA) and the EASA WWW site is easily searchable.
However,
> While
> software is not mentioned, directives to update flight control systems
> are most probably (almost certainly?) software related.
Here is a catch. There is lots of stuff that is design-related which is most easily fixed in SW.
That doesn't mean the source was a SW issue.
Take Learmonth, the Qantas A330 incident in which the PFCS went on a roller-coaster ride. Trigger was a series of signal spikes coming from an ADIRU. Lots of signal anomalies are filtered in the PFCS SW, but this one wasn't. I understand that it had been considered during design and a decision was made that such a signal would not be generated in an otherwise-healthy ADIRU. So they didn't filter. The fix is obviously SW: put in a filter. But the original problem was a misjudgement. (BTW, they never did find anything with the ADIRU to explain the signal.)
I wouldn't be surprised to find that a majority of SW fixes are for such things which do not have a SW origin.
PBL
Prof. Peter Bernard Ladkin, Bielefeld, Germany MoreInCommon Je suis Charlie
Tel+msg +49 (0)521 880 7319 www.rvs-bi.de
More information about the systemsafety
mailing list