What evidence is sufficient to justify the release of a computer-based safety critical system? How should this evidence be presented to certification bodies or regulatory authorities? What best practices should be applied? These are just a few of the questions addressed by Justifying the Dependability of Computer-based Systems, which provides a framework for the justification of the dependability of a computer-based system. The book also explores some of the more fundamental aspects of safety evaluation, such as the nature of models, arguments, evidence and documentation, and the ways to deal with different types of risk and uncertainty.

Justifying the Dependability of Computer-based Systems will be of value to software, computer system, instrumentation and control engineers, and regulators working in industry sectors such as nuclear safety.

Pierre-Jacques Courtois is a Professor in the Department of Computer Science and Engineering at the Catholic University of Louvain-la-Neuve, with particular research interests in safety-critical software for the nuclear industry. He has more than fifteen years experience in the nuclear safety industry, having worked as a nuclear safety advisor in Finland and the UK, and as a consultant to the International Atomic Energy Agency (IAEA) and the Organisation for Economic Co-operation and Development (OECD).

Autorentext

Pierre-Jacques Courtois is a professor of computer science in the engineering department of the Catholic University of Louvain-la-Neuve in Belgium. He has degrees in electrical engineering and nuclear physics, and a doctorate in applied sciences. Formerly with the Philips Research Laboratory in Brussels, he has been working for the last fifteen years at the Belgian authorized inspection agency for nuclear installations, where he is in charge of the assessment of safety critical software based systems used in nuclear power plants. He has served as a consultant to the OECD and to the IAEA for issuing guidance on the design and validation of software important to nuclear safety. He has also served as the chairman of the European Commission nuclear regulator task force on licensing issues of nuclear safety critical software, and he has been active in several European research projects on dependable computer systems and nuclear safety.

Zusammenfassung
Safety is a paradoxical system property. It remains immaterial, intangible and invisible until a failure, an accident or a catastrophy occurs and, too late, reveals its absence. And yet, a system cannot be relied upon unless its safety can be explained, demonstrated and certified. The practical and difficult questions which motivate this study concern the evidence and the arguments needed to justify the safety of a computer based system, or more generally its dependability. Dependability is a broad concept integrating properties such as safety, reliability, availability, maintainability and other related characteristics of the behaviour of a system in operation. How can we give the users the assurance that the system enjoys the required dependability? How should evidence be presented to certification bodies or regulatory authorities? What best practices should be applied? How should we decide whether there is enough evidence to justify the release of the system? To help answer these daunting questions, a method and a framework are proposed for the justification of the dependability of a computer-based system. The approach specifically aims at dealing with the difficulties raised by the validation of software. Hence, it should be of wide applicability despite being mainly based on the experience of assessing Nuclear Power Plant instrumentation and control systems important to safety. To be viable, a method must rest on a sound theoretical background.

Inhalt
The Context.- Current Practices.- Axiomatic Justification and Uncertainty.- Justification and Dependability Case.- Prescriptions.- Requirements, Claims and Evidence.- Arguments, Syntax and Semantics.- Axiomatic Principles and Limits.- Descriptions.- Structures and Interpretations.- Embedded Computer System Structures.- Methodological Implications.- Pre-existing Systems and Components.- Construction Methods.- Postface.