📄 http:^^www.cs.utexas.edu^users^kornerup^quotes.html
字号:
MIME-Version: 1.0
Server: CERN/3.0
Date: Monday, 06-Jan-97 22:47:08 GMT
Content-Type: text/html
Content-Length: 4052
Last-Modified: Wednesday, 06-Nov-96 21:03:45 GMT
<html><head><title>Quotes screaming for Formal Methods</title><body><h1>Quotes screaming for Formal Methods</h1>This is a list of quotes that may convince you that some kind offormalism is needed in the development of critical software. <hr><h3>From the Arianne 5 Crash report, July 1996:</h3><q>"... the view had been taken that software should be considered correctuntil it is shown to be at fault." </q><br><!WA0><a href="http://www.cs.utexas.edu/users/kornerup/ariane5rep.html">Read the full report</a><br><h3>The *Daily Telegraph* 1 Oct 1996: "When Failure is Out of the Question"by Paul Forster</h3><q>National Air Traffic Services Ltd., part of the Civil Aviation Authority, isclose to completing a new (pounds) 300 million centre at Swanick . . . "It'sall digital and probably the most advanced ATC setup anywhere," says Dr JohnBarrett, the Swanick project director, almost nonchalantly. "It's so complexI have difficulty in explaining it even to my board," he says. Throughout,safety is paramount. The whole system is made up of networked workstationsrather than a central mainframe, so there is no single point of failure. . .The system totals roughly two million lines of software, but like mostsoftware it is behind schedule and is still being debugged . . . Operationsare not now due to begin until the winter of 1997 . . . "With ATC it'sobvious that we simply have to remove all the faults in the code, and we arenow working 24 hour a day, seven days a week," says Barrett. "Ourover-arching requirement is that the system has to be completely safe."</q><br>Posted to Risk Digest 18.50, by Brian Randell, Dept. of Computing Science, University of Newcastle<h3>September 16 1996 issue of *Aviation Week & Space Technology*(pp. 24-25).</h3>from David A. Fulghum's "Hard Lessons in Iraq Lead to New AttackPlan" in the September 16 1996 issue of *Aviation Week & Space Technology*(pp. 24-25).<br><q>The article states: "Bomb damage assessment of the initial cruise missilestrike indicates that three of the 10 targets attacked by 13 Air ForceCALCMs (Conventional Air-Launched Cruise Missiles) emerged with "nodetectable damage," according to a U.S. intelligence report. The Boeingbuilt CALCMs, converted from Cold War-era nuclear weapons at a cost of$165,000 each, were launched from two B-52H bombers over the Persian Gulf."Apparently: "Part of the problem with the CALCMs were that they were firedat targets they were not designed to destroy, a product of hasty planning,according to a senior Pentagon official. Air Force success rates werefurther deflated because of missile computer programming quirks."Further on: "Another CALCM target escaped damage because of a softwaretargetting quirk left over from its nuclear role. If two CALCMs are aimed atthe same target at the same time, one of the missiles will re-aim itself atthe next highest priority target. In the initial raid, one CALCM missed thetarget while the other went on to the next site."</q><br>Posted to RISK Digest 18.56 by Kofi Crentsil (crentsil.k@atomcon.gc.ca)<h3>*Electronic Engineering Times*, 28 Oct 1996 "Software explosion rattles car makers"</h3><q>Automakers [are facing] runaway growth in the lines of code their engineersmust write and manage as microprocessors take over automotive functions...``Software is where the problem is today,'' said William Powers, VP ofresearch at Ford. ``Today, if you change a line of code, you're looking atthe potential for some major problems. Hardware is very predictable, veryrepeatable. Software is in much more of a transient state.'' The volume ofcode is exploding as processors proliferate behind the dashboard and underthe hood. The typical auto has 10 to 15 processors; high-end cars can haveas many as 80 ... ``An engine controller can have 100,000 lines of code''[according to a Bosch VP]. </q><br>Posted to RISK digest 18.57 by Daniel P. B. Smith dpbsmith@world.std.com<hr><address><!WA1><a href="mailto:kornerup@tweety.cs.utexas.edu">Jacob Kornerup</a></address></html>⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -