.. awesome-safety-critical documentation master file, created by
   sphinx-quickstart on Fri May  1 14:32:48 2020.
   You can adapt this file completely to your liking, but it should at least
   contain the root `toctree` directive.

:tocdepth: 2

awesome-safety-critical
=======================

.. image:: https://travis-ci.org/stanislaw/awesome-safety-critical.svg?branch=master

This is a list of resources about programming practices for writing
safety-critical software.

**Disclaimer:** Resources collected here are not necessarily authoritative or
latest documents on the topic.


About
-----

.. toctree::
   :maxdepth: 1

   about
   ContentOrganization
   License

Tags
----

.. aws-meta-summary::

Friendly resources
------------------

.. aws-meta::
    :types: List
    :keywords: Safety, Resilience

    `resilience-engineering <https://github.com/lorin/resilience-engineering>`_

    Resilience engineering papers http://resiliencepapers.club

.. aws-meta::
    :types: List
    :keywords: Software Quality

    `awesome-software-quality <https://github.com/ligurio/awesome-software-quality>`_

    List of free software testing and verification resources

.. aws-meta::
    :types: List
    :keywords: Verification

    `awesome-provable <https://github.com/awesomo4000/awesome-provable>`_

    A curated set of links to formal methods involving provable code.

.. aws-meta::
    :types: List
    :keywords: Verification, Formal Verification
    :companies: All

    `practical-fm <https://github.com/ligurio/practical-fm>`_

    A List of companies that use Formal methods in Software engineering

.. aws-meta::
    :types: List
    :keywords: Verification

    `awesome-static-analysis <https://github.com/mre/awesome-static-analysis>`_

    A curated list of static analysis tools, linters and code quality checkers
    for various programming languages

.. aws-meta::
    :types: List
    :keywords: Safety
    :people: Phil Koopman

    `Computer-Based System Safety Essential Reading List <https://safeautonomy.blogspot.com/p/safe-autonomy.html>`_

.. aws-meta::
    :types: List
    :keywords: Safety

    `Safety-Critical Systems Club Publications <https://scsc.uk/publications>`_

Resources
---------

.. aws-meta::
    :types: Resource
    :keywords: Standards
    :industries: Space
    :standards: ECSS

    `European Cooperation for Space Standardization <http://ecss.nl/>`_

    The European Cooperation for Space Standardization is an initiative
    established to develop a coherent, single set of user-friendly standards for
    use in all European space activities.

    **This list has a number of links from this resource.**

.. aws-meta::
    :types: Resource
    :keywords: Formal Verification
    :industries: Space, All
    :companies: NASA

    `NASA Langley Formal Methods Research Program <https://shemesh.larc.nasa.gov/fm/index.html>`_

    The NASA Langley's Formal Methods Research Program of the NASA Langley
    Safety-Critical Avionics Systems Branch develops formal methods technology
    for the development of mission-critical and safety-critical digital systems
    of interest to NASA.

.. aws-meta::
    :types: Resource
    :keywords: Standards
    :industries: Space, All
    :companies: NASA
    :standards: NASA

    `NASA Technical Standards System <https://standards.nasa.gov/nasa-technical-standards>`_

.. aws-meta::
    :types: Resource, Report
    :industries: Space, All
    :companies: NASA

    `NASA Technical Reports Server <https://ntrs.nasa.gov/search.jsp>`_

.. aws-meta::
    :types: Resource
    :industries: All
    :people: Nancy Leveson

    `Nancy Leveson's Home Page at MIT <http://sunnyday.mit.edu/>`_

Software safety standards
-------------------------

.. aws-meta::
    :types: Standard
    :industries: All
    :keywords: Safety, Functional Safety

    `IEC 61508 <https://en.wikipedia.org/wiki/IEC_61508>`_

    IEC 61508 is an international standard published by the International
    Electrotechnical Commission of rules applied in industry. It is titled
    Functional Safety of Electrical/Electronic/Programmable Electronic
    Safety-related Systems (E/E/PE, or E/E/PES).

.. aws-meta::
    :types: Standard
    :industries: Automotive
    :keywords: Safety, Functional Safety

    `ISO 26262 <https://en.wikipedia.org/wiki/ISO_26262>`_

    The ISO 26262 Standard is prepared by the ISO Committee and is a derivative
    of the IEC 61508 standard... The committee members include the major vehicle
    manufacturers and suppliers. It is expressly a safety standard, but includes
    details about Hazard Analysis and Risk Assessment and system design to
    detect faults and their potential failures.

.. aws-meta::
    :types: Standard
    :industries: Railways
    :keywords: Safety, Functional Safety

    `IEC 62279/EN 50128 <https://second.wiki/wiki/en_50128>`_

    IEC 62279 provides a specific interpretation of IEC 61508 for railway
    applications. It is intended to cover the development of software for
    railway control and protection including communications, signaling and
    processing systems.

.. aws-meta::
    :types: Standard
    :industries: Nuclear
    :keywords: Safety, Functional Safety

    IEC 61513

    IEC 61513 provides requirements and recommendations for the instrumentation
    and control for systems important to safety of nuclear power plants. It
    indicates the general requirements for systems that contain conventional
    hardwired equipment, computer-based equipment or a combination of both types of
    equipment.

.. aws-meta::
    :types: Standard
    :industries: Aviation
    :keywords: Safety

    `DO-178C <https://en.wikipedia.org/wiki/DO-178C>`_

    DO-178C, Software Considerations in Airborne Systems and Equipment
    Certification is the primary document by which the certification authorities
    such as FAA, EASA and Transport Canada approve all commercial software-based
    aerospace systems. The document is published by RTCA, Incorporated, in a
    joint effort with EUROCAE, and replaces DO-178B.

    The FAA approved AC 20-115C on 19 Jul 2013, making DO-178C a recognized
    acceptable means, but not the only means, for showing compliance with the
    applicable airworthiness regulations for the software aspects of
    airborne systems and equipment certification." (Wikipedia)

    DO-278, Software Integrity Assurance Considerations for Communication,
    Navigation, Surveillance and Air Traffic Management (CNS/ATM) Systems is the
    equivalent counterpart standard for aviation non-airborne systems.

.. aws-meta::
    :types: Standard
    :industries: All
    :keywords: Safety

    `ARINC standards <https://en.wikipedia.org/wiki/ARINC#Standards>`_

    The ARINC Standards are prepared by the Airlines Electronic Engineering
    Committee (AEEC) where Rockwell Collins and other aviation suppliers serve
    as a contributor in support of their airline customer base. (Wikipedia)

.. aws-meta::
    :types: Standard
    :industries: All
    :keywords: Safety, RTOS

    `ARINC 653 <https://en.wikipedia.org/wiki/ARINC_653>`_

    ARINC 653 is a standard Real Time Operating System (RTOS) interface for
    partitioning of computer resources in the time and space domains. The
    standard also specifies Application Program Interfaces (APIs) for
    abstraction of the application from the underlying hardware and software.

.. aws-meta::
    :types: Standard
    :industries: All
    :keywords: Safety, System Safety

    `MIL-STD-882E, System Safety <http://everyspec.com/MIL-STD/MIL-STD-0800-0899/MIL-STD-882E_41682/>`_

.. aws-meta::
    :types: Standard
    :industries: All
    :keywords: Safety

    `MIL-STD-1472G, Human Engineering <http://everyspec.com/MIL-STD/MIL-STD-1400-1499/download.php?spec=MIL-STD-1472G.039997.pdf>`_

.. aws-meta::
    :types: Standard
    :keywords: Safety
    :industries: Space, All
    :companies: NASA

    `NASA-STD-8739.8A - 2020-06-10 - Software Assurance and Software Safety Standard
    <http://everyspec.com/NASA/NASA-NASA-STD/NASA-STD-8739x8A_56649/>`_

.. aws-meta::
    :types: Standard
    :industries: Space
    :standards: ECSS
    :companies: ESA

    `ECSS-E-ST-40C, Software
    <http://ecss.nl/standard/ecss-e-st-40c-software-general-requirements/>`_

.. aws-meta::
    :types: Standard
    :keywords: Software Quality
    :industries: Space
    :standards: ECSS
    :companies: ESA

    `ECSS-Q-ST-80C Rev.1 – Software product assurance
    <http://ecss.nl/standard/ecss-q-st-80c-rev-1-software-product-assurance-15-february-2017/>`_

.. aws-meta::
    :types: Standard
    :keywords: Software Quality
    :industries: Space
    :standards: NASA
    :companies: NASA

    `NASA-STD-8739.9 - 2018-04-09 - NASA Software Formal Inspections Standard
    <https://ntrs.nasa.gov/citations/20180004877>`_

.. aws-meta::
    :types: Standard
    :keywords: Software
    :industries: Space
    :standards: NASA
    :companies: NASA

    `NASA NPR-7150.2 Software Engineering Requirements
    <https://www.product-lifecycle-management.com/download/NPR-7150.2.pdf>`_

Handbooks
---------

.. aws-meta::
    :types: Handbook
    :standards: ECSS
    :industries: Space
    :companies: ESA

    `ECSS-E-HB-40A – Software engineering handbook <http://ecss.nl/hbstms/ecss-e-hb-40a-software-engineering-handbook-11-december-2013/>`_

.. aws-meta::
    :types: Handbook
    :keywords: Software Quality
    :standards: ECSS
    :industries: Space
    :companies: ESA

    `ECSS‐Q‐HB‐80‐04A – Software metrication programme definition and implementation <http://escies.org/ftp/ecss.nl/Handbooks/ECSS-Q-HB-80-04A(30March2011).pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: NASA
    :keywords: Safety

    `NASA-GB-8719.13 - 2004-03-31 - NASA Software Safety Guidebook <https://standards.nasa.gov/standard/nasa/nasa-gb-871913>`_

    NASA's Software Safety Guidebook (pdf file). The handbook complement to the
    Software Safety Standard.

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: NASA
    :keywords: Safety, Software

    `NASA Software Engineering and Assurance Handbook
    <https://swehb.nasa.gov/display/SWEHBVC/Book+A.+Introduction>`_

.. aws-meta::
    :types: Handbook
    :industries: All
    :companies: NASA
    :keywords: Safety, Safety Culture

    `NASA-HDBK-8709.24 - 2015-11-23 - NASA Safety Culture Handbook <https://standards.nasa.gov/sites/default/files/standards/NASA/Baseline/1/nasa-hdbk-870924_with_change_1.pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: All
    :keywords: Safety

    `Software System Safety Handbook <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/Software_System_Safety_Handbook.pdf>`_

    From the Joint Services Computer Resources Management Group, US Navy,
    US Army, And US Air Force (pdf file)

.. aws-meta::
    :types: Handbook
    :industries: All
    :keywords: Safety

    `Joint Software Systems Safety Engineering Handbook <http://www.acqnotes.com/Attachments/Joint-SW-Systems-Safety-Engineering-Handbook.pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: All
    :keywords: Safety, System Safety

    `Air Force System Safety Handbook <http://www.acqnotes.com/Attachments/AF_System-Safety-HNDBK.pdf>`_

    First chapter has an excellent introduction to system safety with a
    discussion of the evolution of the DoD Standard 882 (DOD Standard Practice
    for System Safety).

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: ESA
    :keywords: Technology Readiness Level

    `European Space Agency - Technology Readiness Levels Handbook for Space Applications <https://artes.esa.int/sites/default/files/TRL_Handbook.pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: Aviation
    :keywords: Safety, System Safety

    `FAA System Safety Handbook
    <http://everyspec.com/FAA/FAA-HDBK/download.php?spec=FAA_SYSTEM_SAFETY_HDBK_21MAY2008.031358.pdf>`_

    Includes chapters (each is a PDF): "System Software Safety", "j. Software Safety".

.. aws-meta::
    :types: Handbook
    :industries: Space, All
    :keywords: Agile Development
    :standards: ECSS

    `ECSS-E-HB-40-01A – Agile software development handbook
    <https://ecss.nl/home/ecss-e-hb-40-01a-agile-software-development-handbook-7-april-2020/>`_

Coding guidelines
-----------------

.. aws-meta::
    :types: Coding guidelines
    :keywords: MISRA
    :languages: C, C++
    :industries: All


    `MISRA guidelines <https://www.misra.org.uk/Publications/tabid/57/Default.aspx>`_

    (MISRA C:2012) Guidelines for the Use of the C Language in Critical Systems,

    ISBN 978-1-906400-10-1 (paperback), ISBN 978-1-906400-11-8 (PDF), March 2013.

    (MISRA C++:2008) Guidelines for the Use of the C++ Language in Critical Systems, ISBN 978-906400-03-3 (paperback), ISBN 978-906400-04-0 (PDF), June 2008.

    See more papers there.

.. aws-meta::
    :types: Coding guidelines
    :keywords: AUTOSAR
    :languages: C++
    :industries: All, Automotive

    `AUTOSAR C++14: Guidelines for the use of the C++14 language in critical and safety-related systems
    <https://www.autosar.org/fileadmin/standards/R22-11/AP/AUTOSAR_RS_CPP14Guidelines.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C, C++
    :industries: All, Space
    :companies: NASA, JPL

    `The Power of Ten – Rules for Developing Safety Critical Code <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/P10.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C
    :industries: All, Space
    :companies: NASA, JPL

    `JPL Institutional Coding Standard for the C Programming Language <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/JPL_Coding_Standard_C.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C
    :industries: All, Space
    :companies: NASA

    `NASA C STYLE GUIDE <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/nasa-c-style.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C++
    :industries: All, Space
    :companies: NASA

    `C++ Coding Standards and Style Guide <https://ntrs.nasa.gov/search.jsp?R=20080039927>`_

    This document is based on the "C Style Guide" (SEL-94-003). It contains recommendations for C++ implementations that build on, or in some cases replace, the style described in the C style guide.

.. aws-meta::
    :types: Coding guidelines
    :languages: C
    :industries: All

    `SEI CERT C Coding Standard <https://www.securecoding.cert.org/confluence/display/c/SEI+CERT+C+Coding+Standard>`_

    SEI CERT C and C++ Coding Standards are now freely available in pdf format:
    `C Coding Standard <http://www.sei.cmu.edu/downloads/sei-cert-c-coding-standard-2016-v01.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C++
    :industries: All

    `SEI CERT C++ Coding Standard <https://www.securecoding.cert.org/confluence/display/cplusplus>`_

    SEI CERT C and C++ Coding Standards are now freely available in pdf format:
    `C++ Coding Standard <http://www.cert.org/downloads/secure-coding/assets/sei-cert-cpp-coding-standard-2016-v01.pdf>`_

.. aws-meta::
    :types: Coding guidelines
    :languages: C++
    :industries: All

    `JOINT STRIKE FIGHTER AIR VEHICLE C++ CODING STANDARDS <http://www.stroustrup.com/JSF-AV-rules.pdf>`_

    also video: `CppCon2014: Bill Emshoff "Using C++ on Mission and Safety Critical Platforms <https://www.youtube.com/watch?v=sRe77Mdna0Y&list=WL&index=2&t=1245s>`_

Topic: Systems Engineering
--------------------------

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: NASA
    :keywords: Requirements, Systems Engineering

    `NASA Systems Engineering Handbook <https://www.nasa.gov/connect/ebooks/nasa-systems-engineering-handbook>`_

    `Expanded Guidance for NASA Systems Engineering. Volume 1: Systems Engineering Practices <https://ntrs.nasa.gov/citations/20170007238>`_

    `Expanded Guidance for NASA Systems Engineering. Volume 2: Crosscutting Topics, Special Topics, and Appendices <https://ntrs.nasa.gov/citations/20170007239>`_

.. aws-meta::
    :types: Handbook
    :industries: All, Defense
    :companies: DoD
    :keywords: Systems Engineering

    `SYSTEMS ENGINEERING FUNDAMENTALS by Department of Defense, Systems Management College <https://ocw.mit.edu/courses/aeronautics-and-astronautics/16-885j-aircraft-systems-engineering-fall-2005/readings/sefguide_01_01.pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: All
    :keywords: Systems Engineering

    `Guide to the Systems Engineering Body of Knowledge (SEBoK) <https://www.sebokwiki.org>`_

Topic: Requirements
-------------------

.. aws-meta::
    :types: Standard
    :keywords: Requirements
    :industries: Space
    :standards: ECSS
    :companies: ESA

    `ECSS-E-ST-10-06C – Technical requirements specification (6 March 2009)
    <https://ecss.nl/standard/ecss-e-st-10-06c-technical-requirements-specification>`_

.. aws-meta::
    :types: Handbook
    :keywords: Requirements
    :industries: Aviation
    :standards: DO-178B
    :companies: FAA

    `Requirements Engineering Management Handbook
    <https://www.faa.gov/aircraft/air_cert/design_approvals/air_software/media/ar-08-32.pdf>`_

    Related full report: `Requirements Engineering Management Findings Report
    <https://www.faa.gov/aircraft/air_cert/design_approvals/air_software/media/ar-08-34.pdf>`_

.. aws-meta::
    :types: Paper
    :keywords: Requirements
    :industries: Defense, All

    `The FAR Approach – Functional Analysis/Allocation and Requirements Flowdown Using Use Case Realizations
    <https://www.acqnotes.com/Attachments/INCOSE%20White%20Paper%20-%20Functional%20Analaysis%20and%20Allocation.pdf>`_

Topic: RAMS
-----------

.. aws-meta::
    :types: Handbook
    :keywords: RAMS, STPA
    :industries: All
    :people: Nancy Leveson, John Thomas

    `STPA handbook
    <https://psas.scripts.mit.edu/home/get_file.php?name=STPA_handbook.pdf>`_

.. aws-meta::
    :types: Handbook
    :keywords: RAMS, CAST, Accidents
    :industries: All
    :people: Nancy Leveson

    `CAST HANDBOOK: How to Learn More from Incidents and Accidents
    <http://sunnyday.mit.edu/CAST-Handbook.pdf>`_

Topic: Fault management
-----------------------

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: NASA
    :keywords: Fault Management, FDIR

    `NASA Fault Management Handbook <https://www.nasa.gov/pdf/636372main_NASA-HDBK-1002_Draft.pdf>`_

    `The Development of NASA’s Fault Management Handbook (Slides) <https://indico.esa.int/event/62/contributions/2777/attachments/2297/2653/1125_-_the-development-of-nasas-fault-management-handbook_Presentation.pdf>`_

.. aws-meta::
    :types: Handbook
    :industries: Space
    :companies: ESA
    :keywords: Fault Management, FDIR

    `SAVOIR FDIR handbook <https://savoir.estec.esa.int/SAVOIRDocuments.htm>`_

.. aws-meta::
    :types: Paper
    :industries: Space
    :companies: NASA, JPL
    :keywords: Fault Management, FDIR

    `GN&C Fault Protection Fundamentals
    <https://trs.jpl.nasa.gov/bitstream/handle/2014/41696/08-0125.pdf?sequence=1>`_

Topic: Certification
--------------------

.. aws-meta::
    :types: Article
    :industries: All
    :keywords: Certification

    `Certification Requirements for Safety-Critical Software <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/Certification-Requirements-for-Safety-Critical-Software-RTC-Magazine.pdf>`_

.. aws-meta::
    :types: Article
    :industries: All
    :companies: ESA, NASA
    :keywords: Certification, Technology Readiness Level

    `Technology Readiness Level, ESA <http://sci.esa.int/sci-ft/50124-technology-readiness-level>`_,
    `Technology Readiness Level, NASA <https://www.nasa.gov/directorates/heo/scan/engineering/technology/txt_accordion1.html>`_

    Technology Readiness Levels (TRL) are a type of measurement system used to
    assess the maturity level of a particular technology. Each technology
    project is evaluated against the parameters for each technology level and is
    then assigned a TRL rating based on the projects progress. There are nine
    technology readiness levels. TRL 1 is the lowest and TRL 9 is the highest.

Topic: Formal verification
--------------------------

.. aws-meta::
    :types: Article
    :industries: All
    :companies: INRIA
    :keywords: Formal Verification

    `Verified Squared: Does Critical Software Deserve Verified Tools? <http://gallium.inria.fr/~xleroy/publi/popl11-invited-talk.pdf>`_

Topic: MC/DC
------------

.. aws-meta::
    :types: Paper
    :industries: All
    :companies: NASA
    :keywords: MC/DC

    `A practical approach to Modified Condition/Decision Coverage <https://ntrs.nasa.gov/archive/nasa/casi.ntrs.nasa.gov/20040086014.pdf>`_

    This paper provides a practical 5-step approach for assessing MC/DC for
    aviation software products, and an analysis of some types of errors expected
    to be caught when MC/DC is achieved.

.. aws-meta::
    :types: Paper
    :industries: All
    :companies: NASA
    :keywords: MC/DC

    `A Practical Tutorial on Modified Condition/Decision Coverage <https://shemesh.larc.nasa.gov/fm/papers/Hayhurst-2001-tm210876-MCDC.pdf>`_

    This tutorial provides a practical approach to assessing modified
    condition/decision coverage (MC/DC) for aviation software products that must
    comply with regulatory guidance for DO-178B level A software.

.. aws-meta::
    :types: Report
    :industries: All
    :companies: FAA
    :keywords: MC/DC

    `An Investigation of Three Forms of the Modified Condition Decision Coverage (MCDC) Criterion
    <http://www.tc.faa.gov/its/worldpac/techrpt/ar01-18.pdf>`_

.. aws-meta::
    :types: Paper
    :industries: All
    :companies: NASA
    :keywords: MC/DC

    `An Empirical Evaluation of the MC/DC Coverage Criterion on the HETE-2 Satellite Software <http://sunnyday.mit.edu/papers/dupuy.pdf>`_

    ...In this paper, we present the results of an empirical study that compared
    functional testing and functional testing augmented with test cases to
    satisfy MC/DC coverage. The evaluation was performed during the testing of
    the attitude control software for the HETE-2 (High Energy Transient
    Explorer) scientific satellite...

Articles
--------

.. aws-meta::
    :types: Article
    :industries: All

    `About Safety Critical Software <http://web.archive.org/web/20110209112635/http://www.aonix.com/safety_critical_overview.html>`_

.. aws-meta::
    :types: Article
    :industries: All

    `IEEE Spectrum-Why Software Fails <http://spectrum.ieee.org/computing/software/why-software-fails>`_

.. aws-meta::
    :types: Article
    :industries: All

    `IEEE Spectrum-Lessons From a Decade of IT Failures <http://spectrum.ieee.org/static/lessons-from-a-decade-of-it-failures>`_

Papers
------

.. aws-meta::
    :types: Paper
    :industries: All
    :people: Nancy Leveson

    `White Paper on Approaches to Safety Engineering <http://sunnyday.mit.edu/caib/concepts.pdf>`_

    This white paper lays out some foundational information about different
    approaches to safety: how various industries differ in their approaches to
    safety engineering, and a comparison of three general approaches to safety
    (system safety, industrial safety engineering, and reliability engineering).
    An attempt is made to lay out the properties of industries and systems that
    make one approach more appropriate than another.

.. aws-meta::
    :types: Paper
    :industries: All
    :keywords: Safety Standards, Software Safety Standards

    `Software Safety Standards: Evolution and Lessons Learned <http://paris.utdallas.edu/reu/document/01-Publications/04-Software-Safety-Standards-TSA.pdf>`_

.. aws-meta::
    :types: Paper
    :industries: All
    :keywords: Safety Standards, Software Safety Standards

    `An Overview of Software Safety Standards <https://www.osti.gov/scitech/servlets/purl/184397>`_

.. aws-meta::
    :types: Paper
    :industries: All
    :people: Joe Armstrong

    `Making reliable distributed systems in the presence of software errors <http://erlang.org/download/armstrong_thesis_2003.pdf>`_

.. aws-meta::
    :types: Paper
    :industries: All

    `Why Do Computers Stop and What Can Be Done About It? <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/TR-85.7.pdf>`_

.. aws-meta::
    :types: Paper
    :industries: All
    :keywords: Requirements

    `Targeting Safety-Related  Errors  During  Software Requirements Analysis <https://trs.jpl.nasa.gov/bitstream/handle/2014/35179/93-0749.pdf>`_

.. aws-meta::
    :types: Paper
    :industries: All, Medical
    :people: Richard Cook

    `How Complex Systems Fail <http://web.mit.edu/2.75/resources/random/How%20Complex%20Systems%20Fail.pdf>`_

.. aws-meta::
    :types: Paper
    :keywords: Accidents
    :industries: All, Space
    :people: Nancy Leveson

    `The Role of Software in Spacecraft Accidents <http://sunnyday.mit.edu/papers/jsr.pdf>`_

.. aws-meta::
    :types: Paper
    :keywords: MISRA
    :languages: C
    :industries: All

    `The MISRA C Coding Standard: A Key Enabler for the Development of Safety-and Security-Critical Embedded Software <https://www.bugseng.com/filebrowser/download/32>`_

.. aws-meta::
    :types: Paper
    :keywords: Compilers
    :languages: C
    :industries: All

    `That’s C, baby. C! <https://www.bugseng.com/filebrowser/download/38>`_

.. aws-meta::
    :types: Paper
    :keywords: Accidents, Safety
    :industries: Medical

    `Adverse Events in Robotic Surgery: A Retrospective Study of 14 Years of FDA Data
    <https://arxiv.org/ftp/arxiv/papers/1507/1507.03518.pdf>`_

.. aws-meta::
    :types: Paper
    :keywords: Software, Safety
    :industries: Railways

    `EN-50128 certification-oriented design of a safety-critical hard real-time kernel
    <https://www.academia.edu/42661525/EN_50128_certification_oriented_design_of_a_safety_critical_hard_real_time_kernel>`_

.. aws-meta::
    :types: Paper
    :keywords: Safety, Conformance
    :industries: Railways

    `Achieving compliance with EN 50128
    <https://www.railjournal.com/in_depth/white-paper-achieving-compliance-with-en-50128/>`_

Reports
-------

.. aws-meta::
    :types: Report
    :industries: Space
    :people: Nancy Leveson

    `An Assessment of Space Shuttle Flight Software Development Processes <https://ntrs.nasa.gov/archive/nasa/casi.ntrs.nasa.gov/19930019745.pdf>`_

.. aws-meta::
    :types: Report
    :industries: Nuclear

    `Licensing of safety critical software for nuclear reactors (2018) <https://www.base.bund.de/SharedDocs/Downloads/BASE/EN/reports/kt/Report-Software.pdf?__blob=publicationFile&v=2>`_

    Common position of international nuclear regulators and authorised technical support organisations

.. aws-meta::
    :types: Report
    :industries: Nuclear

    `Software Important to Safety in Nuclear Power Plants <https://inis.iaea.org/collection/NCLCollectionStore/_Public/25/062/25062186.pdf>`_

.. aws-meta::
    :types: Report
    :industries: Automotive
    :keywords: Safety Standards

    `Assessment of Safety Standards for Automotive Electronic Control Systems <https://www.nhtsa.gov/sites/nhtsa.dot.gov/files/812285_electronicsreliabilityreport.pdf>`_

    Van Eikema Hommes, Q. D. (2016, June). Assessment of safety standards for
    automotive electronic control systems. (Report No. DOT HS 812 285).
    Washington, DC: National Highway Traffic Safety Administration.

.. aws-meta::
    :types: Report
    :industries: Aviation

    `Safety Implications of the use of system-on-chip (SoC) on commercial
    of-the-shelf (COTS) devices in airborne critical applications
    <https://www.easa.europa.eu/sites/default/files/dfu/EASA_REP_RESEA_2008_1.pdf>`_

.. aws-meta::
    :types: Report
    :keywords: Complexity, Software
    :industries: Space
    :companies: NASA

    `NASA Study on Flight Software Complexity (summary)
    <https://github.com/stanislaw/awesome-safety-critical/blob/master/Backup/10.1.1.711.2976.pdf>`_

    `NASA Study on Flight Software Complexity (full report)
    <https://www.nasa.gov/sites/default/files/418878main_FSWC_Final_Report.pdf>`_

Accidents
---------

.. aws-meta::
    :types: Accident Report
    :industries: Space
    :keywords: Accidents
    :people: Nancy Leveson

    `Mars Climate Orbiter Mishap Investigation <http://sunnyday.mit.edu/accidents/MCO_report.pdf>`_

.. aws-meta::
    :types: Accident Report
    :industries: Space
    :keywords: Accidents

    `Report on the Loss of the Mars Polar Lander and Deep Space 2 Missions <https://solarsystem.nasa.gov/system/internal_resources/details/original/3338_mpl_report_1.pdf>`_

.. aws-meta::
    :types: Accident Report
    :industries: Medical
    :keywords: Accidents
    :people: Nancy Leveson

    `An Investigation of the Therac-25 Accidents <https://web.stanford.edu/class/cs240/old/sp2014/readings/therac-25.pdf>`_ (original paper),
    `Medical Devices: The Therac-25 (updated version of the paper) <http://sunnyday.mit.edu/papers/therac.pdf>`_,
    `Killed by a Machine: The Therac-25 <https://hackaday.com/2015/10/26/killed-by-a-machine-the-therac-25>`_ (article)

.. aws-meta::
    :types: Accident Report
    :industries: Space
    :companies: ESA
    :keywords: Accidents
    :people: Nancy Leveson

    `ESA ARIANE 5 Flight 501 Failure <http://sunnyday.mit.edu/accidents/Ariane5accidentreport.html>`_

.. aws-meta::
    :types: Accident Report
    :industries: Space
    :companies: ESA
    :keywords: Accidents

    `ExoMars 2016 - Schiaparelli Anomaly Inquiry (PDF at the bottom) <http://exploration.esa.int/mars/59176-exomars-2016-schiaparelli-anomaly-inquiry>`_,
    `ESA Schiaparelli Lander Crash <http://spacenews.com/esa-mars-lander-crash-caused-by-1-second-inertial-measurement-error>`_

.. aws-meta::
    :types: Accident Report
    :keywords: Accidents
    :industries: Automotive
    :companies: NASA
    :people: Phil Koopman

    `A Case Study of Toyota Unintended Acceleration and Software Safety <https://betterembsw.blogspot.de/2014/09/a-case-study-of-toyota-unintended.html>`_
    and
    `NASA report on the Toyota Unintended Acceleration Issue <https://www.nhtsa.gov/staticfiles/nvs/pdf/NASA-UA_report.pdf>`_

Books
-----

.. aws-meta::
    :types: Book
    :industries: All
    :keywords: Safety, Functional Safety

    `Safety Critical Systems Handbook: A Straight forward Guide to Functional Safety, IEC 61508 (2010 EDITION) and Related Standards, Including Process IEC 61511 and Machinery IEC 62061 and ISO 13849 1st Edition <https://www.amazon.com/Safety-Critical-Systems-Handbook-Functional/dp/0080967817>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, Functional Safety
    :standards: ISO 26262
    :industries: Automotive

    `Automotive System Safety: Critical Considerations for Engineering and Effective Management <https://www.wiley.com/en-us/Automotive+System+Safety%3A+Critical+Considerations+for+Engineering+and+Effective+Management-p-9781119579700>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, Functional Safety
    :standards: ISO 26262
    :industries: Automotive

    `Functional Safety for Road Vehicles <https://www.springer.com/de/book/9783319333601>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, Functional Safety
    :standards: ISO 62279 / EN 50128
    :industries: Railways

    `CENELEC 50128 and IEC 62279 Standards <https://www.wiley.com/en-us/CENELEC+50128+and+IEC+62279+Standards-p-9781848216341>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, System Safety
    :industries: All
    :people: Nancy Leveson

    `Engineering a Safer World. Systems Thinking Applied to Safety
    <https://mitpress.mit.edu/books/engineering-safer-world>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, System Safety
    :industries: All
    :people: Nancy Leveson

    `Safeware: System Safety and Computers
    <http://sunnyday.mit.edu/book.html>`_

        Contents: This book examines past accidents and what is currently known
        about building safe electromechanical systems to see what lessons can be
        applied to new computer-controlled systems.  One lesson is that most
        accidents are not the result of unknown scientific principles but rather
        of a failure to apply well-known, standard engineering practices. A
        second lesson is that accidents will not be prevented by technological
        fixes alone, but will require control of all aspects of the development
        and operation of the system.  The features of a methodology for building
        safety-critical systems are outlined.

.. aws-meta::
    :types: Book
    :keywords: Embedded, Safety, Software, Software Safety Standards, Standards, Certification
    :industries: All
    :people: Chris Hobbs

    Embedded Software Development for Safety-Critical Systems by Chris Hobbs

        Available on Amazon and many other book shops.

.. aws-meta::
    :types: Book
    :industries: All
    :keywords: Safety

    `Computer-Related Risks <http://www.csl.sri.com/users/neumann/neumann-book.html>`_

.. aws-meta::
    :types: Book
    :industries: All

    `Building High Integrity Applications with SPARK <https://www.amazon.com/Building-High-Integrity-Applications-SPARK/dp/1107656842/ref=sr_1_1?s=books&ie=UTF8&qid=1489271661&sr=1-1&keywords=high+integrity+spark>`_

.. aws-meta::
    :types: Book
    :industries: All

    `Building Parallel, Embedded, and Real-Time Applications with Ada <https://www.amazon.com/Building-Parallel-Embedded-Real-Time-Applications/dp/0521197163/ref=sr_1_1?s=books&ie=UTF8&qid=1489271672&sr=1-1&keywords=embedded+ada>`_

.. aws-meta::
    :types: Book
    :languages: C
    :industries: All

    `Writing Solid Code <http://writingsolidcode.com/>`_

.. aws-meta::
    :types: Book
    :keywords: Safety, Certification, Safety Standards, Software Quality
    :languages: C
    :industries: All

    `Safer C: Developing Software for High-Integrity and Safety-Critical Systems
    (The McGraw-Hill International Series in Software Engineering)
    <https://www.leshatton.org/saferc95.html>`_

.. aws-meta::
    :types: Book
    :industries: All
    :keywords: Agile Development, Safety

    `SafeScrum® – Agile Development of Safety-Critical Software <https://www.springer.com/gp/book/9783319993331>`_

.. aws-meta::
    :types: Book
    :industries: Aviation
    :keywords: Certification
    :standards: DO-178C

    `Developing Safety-Critical Software: A Practical Guide for Aviation Software and DO-178C Compliance
    <https://www.springer.com/gp/book/9783319993331>`_

Videos
------

.. aws-meta::
    :types: Video, Lecture
    :industries: All
    :keywords: Embedded, Safety
    :people: Phil Koopman

    `Embedded System Safety Lecture Video Series <https://betterembsw.blogspot.de/2017/12/embedded-system-safety-lecture-video.html>`_

.. aws-meta::
    :types: Video
    :industries: All
    :keywords: Safety, Security
    :people: Nancy Leveson

    `The Need for a Paradigm Shift in Safety and Cyber Security <https://www.youtube.com/watch?v=WBktiCyPLo4>`_

    CREDC Seminar Series. Presented on November 7, 2016 by Nancy Leveson,
    Professor of Aeronautics and Astronautics and Engineering Systems, MIT.
    Cyber Resilient Energy Delivery Consortium (CREDC), http://cred-c.org

.. aws-meta::
    :types: Video
    :industries: All, Medical
    :keywords: Safety
    :people: Richard Cook

    `Velocity 2012: Richard Cook, "How Complex Systems Fail" <https://www.youtube.com/watch?v=2S0k12uZR14>`_

    Dr. Richard Cook is the Professor of Healthcare Systems Safety and Chairman
    of the Department of Patient Safety at the Kungliga Techniska Hogskolan
    (the Royal Institute of Technology) in Stockholm, Sweden. He is a practicing
    physician, researcher and educator.

    See also paper "How Complex Systems Fail".

.. aws-meta::
    :types: Video
    :industries: All, Automotive
    :standards: ISO 26262
    :keywords: Safety, Certification, Compilers

    `2017 EuroLLVM Developers’ Meeting: M. Beemster "Using LLVM for Safety-Critical Applications <https://www.youtube.com/watch?v=pmy1Ttieh3I>`_
    and
    `Using LLVM for Safety-Critical Applications. Interview with Marcel Beemster (Euro LLVM 2017) <https://www.youtube.com/watch?v=zSnfGp9HO7g>`_

    Marcel Beemster, Solid Sands B.V. http://solidsands.nl

.. aws-meta::
    :types: Video
    :industries: All, Aviation
    :companies: Airbus
    :keywords: Formal Verification

    Formal Method for Avionics Software Verification

    - `Formal Method for Avionics Software Verification pt1 (Hervé Delseny) <https://www.youtube.com/watch?v=tRtK4xOK-8o>`_

    - `Formal Method for Avionics Software Verification pt2 (Hervé Delseny) <https://www.youtube.com/watch?v=BVI5J1GAQ30>`_

    - `Formal Method for Avionics Software Verification pt3 (Hervé Delseny) <https://www.youtube.com/watch?v=U3G1ZOoqg78>`_

    - `Formal Method for Avionics Software Verification pt4 (Hervé Delseny) <https://www.youtube.com/watch?v=WtlqS-JOHrA>`_

    This talk will give examples of Airbus use of Formal Methods to verify
    avionics software, and summarises the integration of Formal Methods in the
    upcoming ED-12/DO-178 issue C. Firstly, examples of verification based on
    theorem proving or abstract interpretation will show how Airbus has already
    taken advantage of the use of Formal Methods to verify avionics software.
    Secondly, we will show how Formal Method for verification has been introduced
    in the upcoming issue C of ED-12/DO-178.

.. aws-meta::
    :types: Video
    :industries: All

    `Programming Languages for High-Assurance Vehicles <https://www.youtube.com/watch?v=3iFFYKM3CTM&feature=youtu.be>`_

.. aws-meta::
    :types: Video
    :languages: C
    :industries: All, Space
    :companies: NASA, JPL
    :people: Gerard Holzmann

    `Mars Code - Gerard Holzmann, JPL Laboratory for Reliable Software (2012) <https://www.usenix.org/conference/hotdep12/workshop-program/presentation/holzmann>`_

Interviews
----------

.. aws-meta::
    :types: Interview
    :industries: Medical

    `Safety in Medical Device Software: Questions and Answers <http://electronicdesign.com/embedded/safety-medical-device-software-questions-and-answers>`_

Press
-----

.. aws-meta::
    :types: Press
    :industries: Space

    `They Write the Right Stuff <https://www.fastcompany.com/28121/they-write-right-stuff>`_

    This software is the work of 260 women and men based in an anonymous office
    building across the street from the Johnson Space Center in Clear Lake,
    Texas, southeast of Houston. They work for the “on-board shuttle group,” a
    branch of Lockheed Martin Corps space mission systems division, and their
    prowess is world renowned: the shuttle software group is one of just four
    outfits in the world to win the coveted Level 5 ranking of the federal
    governments Software Engineering Institute (SEI) a measure of the
    sophistication and reliability of the way they do their work. In fact, the
    SEI based it standards in part from watching the on-board shuttle group do
    its work.

.. aws-meta::
    :types: Press
    :keywords: Accidents
    :industries: Medical, Safety

    `We did nothing wrong. Why Software Quality Matters. Case 109 Panama's Cancer Institute
    <https://web.mit.edu/6.033/www/papers/Nothing_Wrong.pdf>`_