National Academy of Sciences | 150 Year Anniversary

Questions? Call 800-624-6242

| Items in cart [0]

The National Academies Press

PAPERBACK
price:$21.00
add to cart

Rights & Permissions

topleft topright

Summary of a Workshop on Software Certification and Dependability (2004)
Computer Science and Telecommunications Board (CSTB)

Citation Manager

. "1 Overview of Workshop Discussions." Summary of a Workshop on Software Certification and Dependability. Washington, DC: The National Academies Press, 2004.

Please select a format:

BibTeX EndNote RefMan


Page
2
bottomleft bottomright

The following HTML text is provided to enhance online readability. Many aspects of typography translate only awkwardly to HTML. Please use the page image as the authoritative form to ensure accuracy.


Summary of a Workshop on Software Certification and Dependability
  • In evaluating a system, appropriate metrics should be used; it may be necessary to measure secondary artifacts (e.g., process quality) as surrogates if what is actually of interest cannot be measured.

  • Developing ways to determine how best to allocate resources (e.g., understanding where errors are likely to cluster) can improve both dependability and cost-effectiveness.

PANEL B LOOKING FORWARD: NEW CHALLENGES, NEW OPPORTUNITIES

  • Over the past several decades society has become increasingly dependent on software. While desktop systems are not generally regarded as safety-critical, these days they are often task-critical for their users. This is true not only at the individual level but also at the organizational level.

  • One increasingly sophisticated set of tools that can help in the software development process with respect to dependability is the set of tools related to programming languages, such as type checkers, static analyzers, and model checkers.

  • Systems integration is a growing and challenging problem. Additional tools and strategies are needed to cope with large-scale systems integration issues.

PANEL C CERTIFICATION AND REGULATION: EXPERIENCE TO DATE

  • The process of certification may add value in a collateral fashion because attention must be paid to issues that might not receive it otherwise; given that software and its uses and contexts change over time, any value that certification has decays over time as well.

  • Market forces and the cost structure of the software industry may create incentives to release flawed software.

  • Validation—determining what the software should do—is often harder than verification, or determining whether the software does it correctly, and may be more important. Despite the difficulties of achieving validation systematically, however, many critical systems seem to function well.

PANEL D ORGANIZATIONAL CONTEXT, INCENTIVES, SAFETY CULTURE, AND MANAGEMENT

  • Systems are certified only within a particular context and up to specified system boundaries; certification of a system may not guarantee the dependability and usefulness of a system over its lifetime.

  • As a system’s reliability increases or is demonstrated over long periods of time, dependence on that system may increase to an extent not anticipated in the original design.

  • Accountability, reporting, and communication are difficult issues that must be planned and managed in detail across an organization.

Page
2