This is a list of resources about programming practices for writing safety-critical software.
The starting point for me to create this resource was my interest in a solid software:
What kind of special training do engineers working on mission-critical software receive? [closed] and its followup on Reddit.
Disclaimer: I don't work on safety-critical software so the resources presented here are not necessarily authoritative or latest documents on topic.
Table of Contents generated with DocToc
- Resources
- Software safety standards
- Safety guidebooks
- Coding guidelines
- Articles
- Papers
- Incidents
- Questions and Answers
- Books
- Interviews
The European Cooperation for Space Standardization is an initiative established to develop a coherent, single set of user-friendly standards for use in all European space activities.
This list has a number of links from this resource.
The International System Safety Society is a non-profit organization dedicated to supporting the Safety Professional in the application of Systems Engineering and Systems Management to the process of hazard, safety and risk analysis. The Society is international in scope and draws members throughout the world. It is affiliated with major corporations, educational institutions and other agencies in the United States and abroad.
This list has a number of links from this resource.
IEC 61508 is an international standard published by the International Electrotechnical Commission of rules applied in industry. It is titled Functional Safety of Electrical/Electronic/Programmable Electronic Safety-related Systems (E/E/PE, or E/E/PES).
DO-178C, Software Considerations in Airborne Systems and Equipment Certification is the primary document by which the certification authorities such as FAA, EASA and Transport Canada approve all commercial software-based aerospace systems. The document is published by RTCA, Incorporated, in a joint effort with EUROCAE, and replaces DO-178B. The new document is called DO-178C/ED-12C and was completed in November 2011 and approved by the RTCA in December 2011. It became available for sale and use in January 2012.
The FAA approved AC 20-115C on 19 Jul 2013, making DO-178C a recognized "acceptable means, but not the only means, for showing compliance with the applicable airworthiness regulations for the software aspects of airborne systems and equipment certification." (Wikipedia)
The ARINC Standards are prepared by the Airlines Electronic Engineering Committee (AEEC) where Rockwell Collins and other aviation suppliers serve as a contributor in support of their airline customer base. (Wikipedia)
The ISO 26262 Standard is prepared by the ISO Committee and is a derivative of the IEC 61508 standard listed above. The committee members include the major vehicle manufacturers and suppliers. It is expressly a safety standard, but includes details about Hazard Analysis and Risk Assessment and system design to detect faults and their potential failures.
NASA's Software Safety Guidebook (pdf file). The handbook complement to the Software Safety Standard.
From the Joint Services Computer Resources Management Group, US Navy, US Army, And US Air Force (pdf file)
First chapter has an excellent introduction to system safety with a discussion of the evolution of the DoD Standard 882 (DOD Standard Practice for System Safety).
-
- (MISRA C:2012) Guidelines for the Use of the C Language in Critical Systems, ISBN 978-1-906400-10-1 (paperback), ISBN 978-1-906400-11-8 (PDF), March 2013.
- (MISRA C++:2008) Guidelines for the Use of the C++ Language in Critical Systems, ISBN 978-906400-03-3 (paperback), ISBN 978-906400-04-0 (PDF), June 2008.
- See more papers there.
-
The Power of Ten – Rules for Developing Safety Critical Code
Jet Propulsion Laboratory – scientific institution making a lot of research and development for NASA. JPL have been developing software for most of unmanned missions in the field of deep space and other planets exploration. Their portfolio includes such famous missions as Curiosity Mars rover and Voyager probe which left solar system after 25 years of flight and still providing scientific information. High level of automatization and long duration of missions led to superior demands to software quality. As a result of JPL amazing experience a set of code guidelines was developed and published recently.
This document is based on the "C Style Guide" (SEL-94-003). It contains recommendations for C++ implementations that build on, or in some cases replace, the style described in the C style guide.
-
SEI CERT C and C++ Coding Standards are now freely available in pdf format: C++ Coding Standard, C Coding Standard
This white paper lays out some foundational information about different approaches to safety: how various industries differ in their approaches to safety engineering, and a comparison of three general approaches to safety (system safety, industrial safety engineering, and reliability engineering). An attempt is made to lay out the properties of industries and systems that make one approach more appropriate than another.
-
Making reliable distributed systems in the presence of software errors
-
Targeting Safety-Related Errors During Software Requirem.ents Analysis
-
A Case Study of Toyota Unintended Acceleration and Software Safety and NASA report on the Toyota Unintended Acceleration Issue
See Which languages are used for safety-critical software? [closed].
This article contains interesting section on what is the difference between mission-critical and safety-critical software: Military COTS-based systems: Not necessarily right off the shelf
See What kind of special training do engineers working on mission-critical software receive? [closed] and its followup on Reddit. In the Reddit thread there are 2 expanded answers. The thread is also archived here.
See the Software Safety Standards here in this list.
Also see on StackOverflow: Coding for high reliability/availability/security - what standards do I read? and Software Safety Standards
Safety-critical software and optimising compilers
Does Rust have a chance in mission-critical software? (currently Ada and proven C niches)