[SystemSafety] Difference between software reliability and astrology

[Prof. Dr. Peter Bernard Ladkin]

On 2024-08-23 11:40 , Dewi Daniels wrote:
> A rationale for 1 X 10^-9 is provided in EASA AMC 25.1309 Certification Specifications for Large 
> Aeroplanes (CS-25) (europa.eu) 
> <https://www.easa.europa.eu/sites/default/files/dfu/CS-25_Amdt%203_19.09.07_Consolidated%20version.pdf>. 
> AMC 25.1309 section 6.a reads:

That is consistent with what Lloyd and Tye stated in 1982. It should not be surprising -- the 
Catastrophic Failure conditions haven't changed since (before) then and neither have the basic 
architectures of high-performance commercial transport airplanes (i.e., those falling under Part 
25). What has changed is how those failure conditions might be arrived at.

PBL

Prof. Dr. Peter Bernard Ladkin
Causalis Limited/Causalis IngenieurGmbH, Bielefeld, Germany
Tel: +49 (0)521 3 29 31 00