Issue No. 01 - January (1993 vol. 19)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/32.210303
<p>This work affirms that the quantification of life-critical software reliability is infeasible using statistical methods, whether these methods are applied to standard software or fault-tolerant software. The classical methods of estimating reliability are shown to lead to exorbitant amounts of testing when applied to life-critical software. Reliability growth models are examined and also shown to be incapable of overcoming the need for excessive amounts of testing. The key assumption of software fault tolerance-separately programmed versions fail independently-is shown to be problematic. This assumption cannot be justified by experimentation in the ultrareliability region, and subjective arguments in its favor are not sufficiently strong to justify it as an axiom. Also, the implications of the recent multiversion software experiments support this affirmation.</p>
reliability; life-critical real-time software; statistical methods; fault-tolerant software; growth models; software fault tolerance; multiversion software experiments; fault tolerant computing; real-time systems; safety; software reliability
G. Finelli and R. Butler, "The Infeasibility of Quantifying the Reliability of Life-Critical Real-Time Software," in IEEE Transactions on Software Engineering, vol. 19, no. , pp. 3-12, 1993.