
We are building systems today-and using computers to control them-that have the potential for large-scale destruction of life and environment. More than ever, software engineers and system developers, as well as their managers, must understand the issues and develop the skills needed to anticipate and prevent accidents. Nancy Leveson examines what is currently known about building safe electromechanical systems and looks at past accidents to see what practical lessons can be applied to new computer-controlled systems.
Note that this book is 30 years old!
[1]: N. G. Leveson and C. S. Turner, "An investigation of the Therac-25 accidents," in Computer, vol. 26, no. 7, pp. 18-41, July 1993.
[2]: Nancy Leveson. Safeware: System Safety and Computers. Addison-Wesley, 1995.
[3]: http://sunnyday.mit.edu/papers/therac.pdf
[4]: https://web.mit.edu/6.033/2014/wwwdocs/papers/therac.pdf
and the work of the author, Nancy Leveson:
In return may I offer this absolutely bitchin' tome Safeware by Nancy Leveson https://www.amazon.co.uk/Safeware-System-Safety-Computers-19... which I can't recommend enough. It's aimed at a lower level than your book AFAICT (lower level = less about interconnectedness of large systems) but it's a must read.
