Read An Investigation of the Therac-25 Accidents by Leveson and Turner (reading #4, also available online as a pdf or html ). Also read the following two brief reports that are available only on-line:

• Nuclear Regulatory Commission Information Notice 2001-8
• Multidata response.

Although there are many cases in which software design and failure has led to the loss of life, the case of the Therac-25 is among the best known and most widely cited because of the depth of analysis that was performed by professor Nancy Leveson and her graduate student Clark Turner. The Leveson paper is quite long, and not all parts are equally important. This is a good opportunity for you to begin practicing how to get the interesting stuff out of a paper without getting bogged down in minor detail:

• Start with a quick pass, just reading the section headings and the figure captions, to get an idea of the layout of the paper and what kinds of things the authors seem to be trying to communicate.
• Next, skim it quickly, looking primarily at the first and last paragraph of each section.
• Read disconnected sections (sometimes called boxes) or sidebars on pp. 20-21, p. 24 and p. 25. These sections contain technical information that both stands on its own and that the authors couldn't figure out how to gracefully integrate into the main text of the article. Often on a long article or book chapter, the sidebars give you background material that makes the main text easier to understand.

Now ask yourself why it was assigned as a 6.033 reading, and with that in mind, start working your way through the meat of the paper. Some sections can be skimmed quickly, while other parts require careful study. Not surprisingly, there is also some redundant information that you can ignore.

As you read the paper, try to distinguish solid technical facts from higher-level statements that the authors are trying to make about process, procedures and policy. You might find it useful to note the places where you agree or disagree with the authors' analysis.

Finally, don't be dismayed by unfamiliar technical jargon; make a guess about what it means and move on. The authors may explain it two paragraphs later, or two pages later, or perhaps never get around to it. There is a good chance that you will discover that it didn't actually matter. But if it does, you have something to ask about in recitation.

After reading the Leveson paper, write a one-page reading report that addresses the following question:

Catastrophic failures often have their genesis in different areas of the development of a complex system. Choose two of the following areas and describe how a problem in each area ultimately contributed to the Therac-25 accidents. Be sure to justify your answer using information from the Leveson paper.

• Design
• Implementation
• Testing
• Oversight

Remember, use no more than one sheet of paper for your report. (Consult the 6.033 FAQ for formatting specifications.) We care more about quality and conciseness than the amount of content in your essay. You will not be able to address every issue in one page, so you will have to make your best argument and judiciously choose supporting facts for this one-pager.

Two copies of this assignment are due at the beginning of recitation on Tuesday, February 8, 2005. The second copy will be forwarded to the writing program for evaluation.