Nancy Leveson Quotes

• Safety is an emergent property of systems, not a component property.

  Nancy Leveson

  Safety, Property, Components

  6 Copy quote

• What [software] must not do is not the inverse of what it must do. .

  Nancy Leveson

  Software, Inverse

  4 Copy quote

• Software−related accidents are usually caused by flawed requirements.

  Nancy Leveson

  Requirements, Software, Flawed

  6 Copy quote

• Reliability engineers often assume that reliability and safety are synonymous, but this assumption is true only in special cases.

  Nancy Leveson

  Safety, Special, Reliability

  Nancy Leveson (1995). “SafeWare: System Safety and Computers”, Addison-Wesley Professional

  6 Copy quote

• Requirement completeness: Requirements are sufficient to distinguish the desired behavior of the software from that of any other undesired program that might be designed. .

  Nancy Leveson

  Might, Requirements, Behavior

  Nancy Leveson (2011). “Engineering a Safer World: Systems Thinking Applied to Safety”, p.49, MIT Press

  4 Copy quote

• Highly reliable components are not necessarily safe. .

  Nancy Leveson

  Safe, Components

  4 Copy quote

• facebook
• twitter
• googleplus
• email
• linkedin