Re: nancy leveson's book and paper reference

[Jan Kreft]

OK,

so the problem is lack of independence. If two versions would be
independent, output agreement would be sufficient, right?

Of course, true independence can't be achieved, but it is the goal.

And I wouldn't know of anything better than comparing two versions that
are as independent as possible.

Ciao, Jan.

On Tue, 2 May 2000 address@hidden wrote:

> 
> hi, all -
> 
> nancy leveson's book is
>       safeware: system safety in the computer age
>       addison-wesley 1995
> 
> her paper on n-version programming is
>       j.c.knight and n.g.leveson
>       an experimental evaluation of the assumption of independence
>               in multi-version programming
>       ieee transactions on software engineering, volume se-12,
>               number 1, pp. 96-109, january 1986
> 
> there are numerous others - see http://sunnyday.mit.edu/
> 
> more later,
> cal



                  ==================================
   Swarm-Modelling is for discussion of Simulation and Modelling techniques
   esp. using Swarm.  For list administration needs (esp. [un]subscribing),
   please send a message to <address@hidden> with "help" in the
   body of the message.
                  ==================================