From: jpt@diphi.demon.co.uk (JP Thornley)
Subject: Re: Ada safety road Was: Which is right ...
Date: 1999/06/19
Date: 1999-06-19T00:00:00+00:00 [thread overview]
Message-ID: <436250085wnr@diphi.demon.co.uk> (raw)
In-Reply-To: 37682F64.59E2@lmco.com
In article: <37682F64.59E2@lmco.com> William Dale
<william.dale.jr@lmco.com> writes:
[with reference to the HRG Guidance)
> I hope the document covers the system trade-offs of going through
> such rigorous and costly certifications when a simple hardware addition
> would make the system safe.
Well, since I said that:
"The Guide is _aimed at_ producers of high integrity software, where the
software supplier is (usually) required to demonstrate the integrity of
the software",
it is difficult to see why anyone would expect to see discussions of
system safety and the choice of hardware solutions in the Guide.
>
> Too often the software effort is forced to shoulder the entire
> burden of system safety. Gutting language features to make software
> certifiable is often coupled with irrational fear of new features
> and technology.
The Guide makes no recommendations based on the newness of language
features. What it does is to analyse the interaction between the
verification techniques used for software and the features of Ada 95,
pointing out those language features that will make each technique
either difficult or impossible to apply.
>
> Many times it still does not make for a "safe" system. When safety
> certified applications sit on top of untested operating systems
> and amidst other COTS applications disaster is possible,
> maybe probible.
But surely no application can be certified other than as part of
a complete system - which must include the operating system/other COTS
components.
Safety is an attribute of a system, never of software.
>
> Bill Dale
>
>
Phil Thornley
--
------------------------------------------------------------------------
| JP Thornley EMail jpt@diphi.demon.co.uk |
| phil.thornley@acm.org |
------------------------------------------------------------------------
next prev parent reply other threads:[~1999-06-19 0:00 UTC|newest]
Thread overview: 57+ messages / expand[flat|nested] mbox.gz Atom feed top
1999-05-30 0:00 Which is right here - GNAT or OA ? Vladimir Olensky
1999-05-30 0:00 ` Robert Dewar
1999-05-31 0:00 ` Vladimir Olensky
1999-05-31 0:00 ` Robert Dewar
1999-06-01 0:00 ` dennison
1999-05-30 0:00 ` Florian Weimer
1999-05-31 0:00 ` Vladimir Olensky
1999-05-31 0:00 ` Robert Dewar
1999-06-05 0:00 ` Vladimir Olensky
1999-06-05 0:00 ` Vladimir Olensky
1999-06-05 0:00 ` Robert Dewar
1999-06-07 0:00 ` Ada safety road Was: Which is right Vladimir Olensky
1999-06-06 0:00 ` Larry Kilgallen
1999-06-07 0:00 ` Keith Thompson
1999-06-07 0:00 ` Hyman Rosen
1999-06-08 0:00 ` Robert A Duff
1999-06-08 0:00 ` Keith Thompson
1999-06-09 0:00 ` Robert Dewar
1999-06-09 0:00 ` Tucker Taft
1999-06-09 0:00 ` Robert Dewar
1999-06-09 0:00 ` dennison
1999-06-09 0:00 ` Entamology of "Nasal Demons" dennison
1999-06-08 0:00 ` Ada safety road Was: Which is right Robert Dewar
1999-06-09 0:00 ` dennison
1999-06-08 0:00 ` Robert Dewar
1999-06-07 0:00 ` Keith Thompson
1999-06-08 0:00 ` Robert A Duff
1999-06-08 0:00 ` Robert A Duff
1999-06-14 0:00 ` Ada safety road Franco Mazzanti
1999-06-15 0:00 ` Franco Mazzanti
1999-06-16 0:00 ` Vladimir Olensky
1999-06-06 0:00 ` Ada safety road Was: Which is right Robert Dewar
1999-06-07 0:00 ` Pascal F. Martin
1999-06-07 0:00 ` Vladimir Olensky
1999-06-08 0:00 ` Robert A Duff
1999-06-10 0:00 ` Peter Amey
1999-06-10 0:00 ` Markus Kuhn
1999-06-11 0:00 ` Vladimir Olensky
1999-06-12 0:00 ` Robert Dewar
1999-06-12 0:00 ` JP Thornley
1999-06-13 0:00 ` Vladimir Olensky
1999-06-16 0:00 ` William Dale
1999-06-19 0:00 ` JP Thornley [this message]
1999-06-21 0:00 ` Robert A Duff
1999-06-13 0:00 ` Vladimir Olensky
1999-06-12 0:00 ` Matthew Heaney
1999-06-13 0:00 ` Vladimir Olensky
1999-06-13 0:00 ` Robert Dewar
1999-06-13 0:00 ` swhalen
1999-06-13 0:00 ` Vladimir Olensky
1999-06-13 0:00 ` Robert Dewar
1999-06-13 0:00 ` Vladimir Olensky
1999-06-05 0:00 ` Which is right here - GNAT or OA ? Florian Weimer
1999-06-01 0:00 ` Tucker Taft
1999-05-31 0:00 ` David Botton
1999-06-01 0:00 ` dennison
1999-06-03 0:00 ` Matthew Heaney
replies disabled
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox