Authors:

Nancy Leveson Quotes

Safety is an emergent property of systems, not a component property.

Safety is an emergent property of systems, not a component property.

Nancy Leveson
Safety, Property, Components

What [software] must not do is not the inverse of what it must do. .

Nancy Leveson
Software, Inverse

Software−related accidents are usually caused by flawed requirements.

Nancy Leveson
Requirements, Software, Flawed

Reliability engineers often assume that reliability and safety are synonymous, but this assumption is true only in special cases.

Nancy Leveson
Safety, Special, Reliability
Nancy Leveson (1995). “SafeWare: System Safety and Computers”, Addison-Wesley Professional

Requirement completeness: Requirements are sufficient to distinguish the desired behavior of the software from that of any other undesired program that might be designed. .

Nancy Leveson
Might, Requirements, Behavior
Nancy Leveson (2011). “Engineering a Safer World: Systems Thinking Applied to Safety”, p.49, MIT Press

Highly reliable components are not necessarily safe. .

Nancy Leveson
Safe, Components

You May Also Like: