Embedded Systems Conference
Breaking News
Newest First | Oldest First | Threaded View
Peter Clarke
User Rank
Re: Software safety
Peter Clarke   7/2/2013 3:20:09 AM


Thanks for chiming in.


Your point about software testing not being exhaustive against all possibilities and timings of external events is important.


Formal methods were once thought to be the way to "prove" hardware was correct but idea of formally provable hardware lost momentum when it was realized that formally proving sofware-plus-hardware-plus-interrupts was a much less tractable problem.

User Rank
Re: Software safety
DrQuine   7/1/2013 11:00:47 PM
An example of the kind of thing that these standards do is that IEC 61508 requires that the software is fully tested at the function level and that all possible branches and paths are taken through the software. This is an important step in that having a system do unexpected things that were never tested may be possible to avoid. This, however, cannot necessarily ensure that every unexpected external event will result in the correct software "decision" and outcome.

Peter Clarke
User Rank
Re: Software safety
Peter Clarke   7/1/2013 8:27:56 AM
IEC 61508 is a standard on the functional safety of electrical and electronic systems and specifically includes software.

So if you want to learn what is necessary I suggest you download the standard.

ISO 26262 is an automotive functional safety standard which again sets out methods of risk assement and how risk concatenates through an automotive function chain. Again it explicitly mentions software.

How you test software for safety is an enormous topic and too beg to address here.

I would just point out that these standards also expect users to test the tools they use to help them create software - such as compilers - to make sure they do not introduce problems.


User Rank
Software safety
MeasurementBlues   7/1/2013 8:18:52 AM
What are the main reasons for IEC 61508 and ISO 26262? How does software get tested for safety?

User Rank
Interesting -- This seems to be the first offering by a silicon OEM in this area
Pho99   7/1/2013 6:28:23 AM
Interesting -- This seems to be the first offering by a silicon OEM in this area

As data rates begin to move beyond 25 Gbps channels, new problems arise. Getting to 50 Gbps channels might not be possible with the traditional NRZ (2-level) signaling. PAM4 lets data rates double with only a small increase in channel bandwidth by sending two bits per symbol. But, it brings new measurement and analysis problems. Signal integrity sage Ransom Stephens will explain how PAM4 differs from NRZ and what to expect in design, measurement, and signal analysis.

Datasheets.com Parts Search

185 million searchable parts
(please enter a part number or hit search to begin)
Like Us on Facebook
Special Video Section
The LTC®6363 is a low power, low noise, fully differential ...
Vincent Ching, applications engineer at Avago Technologies, ...
The LT®6375 is a unity-gain difference amplifier which ...
The LTC®4015 is a complete synchronous buck controller/ ...
The LTC®2983 measures a wide variety of temperature sensors ...
The LTC®3886 is a dual PolyPhase DC/DC synchronous ...
The LTC®2348-18 is an 18-bit, low noise 8-channel ...
The LT®3042 is a high performance low dropout linear ...
Chwan-Jye Foo (C.J Foo), product marketing manager for ...
The LT®3752/LT3752-1 are current mode PWM controllers ...
LED lighting is an important feature in today’s and future ...
Active balancing of series connected battery stacks exists ...
After a four-year absence, Infineon returns to Mobile World ...
A laptop’s 65-watt adapter can be made 6 times smaller and ...
An industry network should have device and data security at ...
The LTC2975 is a four-channel PMBus Power System Manager ...
In this video, a new high speed CMOS output comparator ...
The LT8640 is a 42V, 5A synchronous step-down regulator ...
The LTC2000 high-speed DAC has low noise and excellent ...
How do you protect the load and ensure output continues to ...