Evaluation of software dependability

It has been said that the term software engineering is an aspiration not a description. We would like to be able to claim that we engineer software, in the same sense that we engineer an aero-engine, but most of us would agree that this is not currently an accurate description of our activities. My suspicion is that it never will be. From the point of view of this essay – i.e. dependability evaluation – a major difference between software and other engineering artefacts is that the former is pure design. Its unreliability is always the result of design faults, which in turn arise as a result of human intellectual failures. The unreliability of hardware systems, on the other hand, has tended until recently to be dominated by random physical failures of components – the consequences of the ‘perversity of nature’. Reliability theories have been developed over the years which have successfully allowed systems to be built to high reliability requirements, and the final system reliability to be evaluated accurately. Even for pure hardware systems, without software, however, the very success of these theories has more recently highlighted the importance of design faults in determining the overall reliability of the final product. The conventional hardware reliability theory does not address this problem at all. In the case of software, there is no physical source of failures, and so none of the reliability theory developed for hardware is relevant. We need new theories that will allow us to achieve required dependability levels, and to evaluate the actual dependability that has been achieved, when the sources of the faults that ultimately result in failure are human intellectual failures

Software reliability and dependability: a roadmap

Shifting the focus from software reliability to user-centred measures of dependability in complete software-based systems. Influencing design practice to facilitate dependability assessment. Propagating awareness of dependability issues and the use of existing, useful methods. Injecting some rigour in the use of process-related evidence for dependability assessment. Better understanding issues of diversity and variation as drivers of dependability. Bev Littlewood is founder-Director of the Centre for Software Reliability, and Professor of Software Engineering at City University, London. Prof Littlewood has worked for many years on problems associated with the modelling and evaluation of the dependability of software-based systems; he has published many papers in international journals and conference proceedings and has edited several books. Much of this work has been carried out in collaborative projects, including the successful EC-funded projects SHIP, PDCS, PDCS2, DeVa. He has been employed as a consultant t

Space Structures: Issues in Dynamics and Control

A selective technical overview is presented on the vibration and control of large space structures, the analysis, design, and construction of which will require major technical contributions from the civil/structural, mechanical, and extended engineering communities. The immediacy of the U.S. space station makes the particular emphasis placed on large space structures and their control appropriate. The space station is but one part of the space program, and includes the lunar base, which the space station is to service. This paper attempts to summarize some of the key technical issues and hence provide a starting point for further involvement. The first half of this paper provides an introduction and overview of large space structures and their dynamics; the latter half discusses structural control, including control‐system design and nonlinearities. A crucial aspect of the large space structures problem is that dynamics and control must be considered simultaneously; the problems cannot be addressed individually and coupled as an afterthought

Validation of Ultrahigh Dependability for Software-Based Systems

Modern society depends on computers for a number of critical tasks in which failure can have very high costs. As a consequence, high levels of dependability (reliability, safety, etc.) are required from such computers, including their software. Whenever a quantitative approach to risk is adopted, these requirements must be stated in quantitative terms, and a rigorous demonstration of their being attained is necessary. For software used in the most critical roles, such demonstrations are not usually supplied. The fact is that the dependability requirements often lie near the limit of the current state of the art, or beyond, in terms not only of the ability to satisfy them, but also, and more often, of the ability to demonstrate that they are satisfied in the individual operational products (validation). We discuss reasons why such demonstrations cannot usually be provided with the means available: reliability growth models, testing with stable reliability, structural dependability modelling, as well as more informal arguments based on good engineering practice. We state some rigorous arguments about the limits of what can be validated with each of such means. Combining evidence from these different sources would seem to raise the levels that can be validated; yet this improvement is not such as to solve the problem. It appears that engineering practice must take into account the fact that no solution exists, at present, for the validation of ultra-high dependability in systems relying on complex software

Knowledge, Capabilities and the Poverty Trap: The Complex Interplay Between Technological, Social and Geographical Factors

This paper explores the possibility that technological capabilities, to lead to development, need to be accompanied by a broader set of “social capabilities”, reflecting not only the quality of governance but also the spread of values, beliefs and institutions that encourage members of society to actively contribute to the development process. To investigate this issue, a set of empirical indicators, reflecting the capabilities that have been emphazised in the literature as being important for development, was identified. We also take into account the possibility that these capabilities (and their impact) may be conditioned by historically given factors (related to, for example, geography, demography and history). The paper uses factor analysis to analyse the question of how these indicators interrelate and explores their relationship with economic development. We find that technological and social capabilities are indeed strongly related and, moreover, strongly correlated with economic development. The same does not apply for the second factor suggested by the analysis, which mainly reflects the character of countries’ political systems. Thus it is more important economically what countries do than how they decide on it. A strong negative relationship with development was found for the third factor, reflecting the combined effect of high fertility rates, low education and high frequency of serious disease. Arguably, this contributes to a “vicious circle” that makes it difficult for some very poor countries, especially in the tropics, to escape from poverty.

Exclusion zone phenomena in water -- a critical review of experimental findings and theories

The existence of the exclusion zone (EZ), a layer of water in which plastic microspheres are repelled from hydrophilic surfaces, has now been independently demonstrated by several groups. A better understanding of the mechanisms which generate EZs would help with understanding the possible importance of EZs in biology and in engineering applications such as filtration and microfluidics. Here we review the experimental evidence for EZ phenomena in water and the major theories that have been proposed. We review experimental results from birefringence, neutron radiography, nuclear magnetic resonance, and other studies. Pollack and others have theorized that water in the EZ exists has a different structure than bulk water, and that this accounts for the EZ. We present several alternative explanations for EZs and argue that Schurr's theory based on diffusiophoresis presents a compelling alternative explanation for the core EZ phenomenon. Among other things, Schurr's theory makes predictions about the growth of the EZ with time which have been confirmed by Florea et al. and others. We also touch on several possible confounding factors that make experimentation on EZs difficult, such as charged surface groups, dissolved solutes, and adsorbed nanobubbles.Comment: 14 pg

Shipboard Crisis Management: A Case Study.

The loss of the "Green Lily" in 1997 is used as a case study to highlight the characteristics of escalating crises. As in similar safety critical industries, these situations are unpredictable events that may require co-ordinated but flexible and creative responses from individuals and teams working in stressful conditions. Fundamental skill requirements for crisis management are situational awareness and decision making. This paper reviews the naturalistic decision making (NDM) model for insights into the nature of these skills and considers the optimal training regimes to cultivate them. The paper concludes with a review of the issues regarding the assessment of crisis management skills and current research into the determination of behavioural markers for measuring competence

Vibration serviceability of footbridges under human-induced excitation : a literature review

Increasing strength of new structural materials and longer spans of new footbridges, accompanied with aesthetic requirements for greater slenderness, are resulting in more lively footbridge structures. In the past few years this issue attracted great public attention. The excessive lateral sway motion caused by crowd walking across the infamous Millennium Bridge in London is the prime example of the vibration serviceability problem of footbridges. In principle, consideration of footbridge vibration serviceability requires a characterisation of the vibration source, path and receiver. This paper is the most comprehensive review published to date of about 200 references which deal with these three key issues. The literature survey identified humans as the most important source of vibration for footbridges. However, modelling of the crowd-induced dynamic force is not clearly defined yet, despite some serious attempts to tackle this issue in the last few years. The vibration path is the mass, damping and stiffness of the footbridge. Of these, damping is the most uncertain but extremely important parameter as the resonant behaviour tends to govern vibration serviceability of footbridges. A typical receiver of footbridge vibrations is a pedestrian who is quite often the source of vibrations as well. Many scales for rating the human perception of vibrations have been found in the published literature. However, few are applicable to footbridges because a receiver is not stationary but is actually moving across the vibrating structure. During footbridge vibration, especially under crowd load, it seems that some form of human–structure interaction occurs. The problem of influence of walking people on footbridge vibration properties, such as the natural frequency and damping is not well understood, let alone quantified. Finally, there is not a single national or international design guidance which covers all aspects of the problem comprehensively and some form of their combination with other published information is prudent when designing major footbridge structures. The overdue update of the current codes to reflect the recent research achievements is a great challenge for the next 5–10 years

The strategic use of patents and its implications for enterprise and competition policies

This report was commissioned as a study into the strategic use of patents. In the course of its case investigations and legislative reviews the European Commission became aware of changes in the use of intellectual property, in particular the use of patents. It was noted that firms’ uses of intellectual property are becoming increasingly strategic. This raised concerns about the implications of firms’ patenting behaviour for enterprise and competition policy. The following report contains a comprehensive review of patenting behaviour, the extent to which patenting is becoming more strategic and the implications this has for competition and enterprise policies