Differences

This shows you the differences between two versions of the page.

--- public:course [2009/03/09 02:54] – created jonathan
+++ public:course [2009/12/14 20:20] (current) – jonathan
@@ Line 3: / Line 3: @@
-Safety critical systems are complex systems that interact with a dangerous environment (e.g. nuclear reactors or radiation therapy machines such as the [[http://en.wikipedia.org/wiki/Therac-25|Therac-25]] for treating cancer patients). The specification and design of software and hardware for such systems is challenging because these systems may result in death or serious injury to people, loss or severe damage to equipment or environmental harm. So ordinary testing methods are insufficient to ensure that they work reliably and safely.
+Safety critical systems are complex systems that interact with a dangerous environment (e.g. nuclear reactors, medical devices such as radiation therapy machines such as the [[http://en.wikipedia.org/wiki/Therac-25|Therac-25]] for treating cancer patients, and airplanes). The specification and design of software and hardware for such systems is challenging because these systems may result in death or serious injury to people, loss or severe damage to equipment or environmental harm. So ordinary testing methods are insufficient to ensure that they work reliably and safely.
 In this course, we use industrial strength methods and tools such as [[http://www.event-b.org/|Event-B]], [[http://alloy.mit.edu/community/|Alloy]] and [[http://spinroot.com/spin/whatispin.html|Spin]] for the design of safety critical systems. These methods and tools are all in use in actual practice in industry.