C ASE S TUDY 1 Software Engineering. S TATISTIC Conducted by Standish Group – 1994 365 IT executives of US companies in different industries 8,380 projects.

Slides:



Advertisements
Similar presentations
Copyright 2006 Mid-City Offices Systems. Busy people… How would your business be affected, if you suddenly lost all of your computer data? Rush through.
Advertisements

Test process essentials Riitta Viitamäki,
Networking Essentials Lab 3 & 4 Review. If you have configured an event log retention setting to Do Not Overwrite Events (Clear Log Manually), what happens.
System Development Life Cycle (SDLC)
CSCI 5230: Project Management Software Reuse Disasters: Therac-25 and Ariane 5 Flight 501 David Sumpter 12/4/2001.
An Investigation of the Therac-25 Accidents Nancy G. Leveson Clark S. Turner IEEE, 1993 Presented by Jack Kustanowitz April 26, 2005 University of Maryland.
1. Software in our lives, then and now  Medical (processing and analysis, Computer Aided Surgery, other various equipment)  Financial and business (banking,
Terminology Successful Project: Completed on time and on budget, with all requirements implemented and the user community is generally happy with the.
Programming Types of Testing.
Nummenmaa & Thanish: Practical Distributed Commit in Modern Environments PDCS’01 PRACTICAL DISTRIBUTED COMMIT IN MODERN ENVIRONMENTS by Jyrki Nummenmaa.
Syllabus Case Histories WW III Almost Medical Killing Machine
Software Engineering Disasters
Ethics in a Computing Culture
©Ian Sommerville 2000CS 365 Ariane 5 launcher failureSlide 1 The Ariane 5 Launcher Failure June 4th 1996 Total failure of the Ariane 5 launcher on its.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 12: Managing and Implementing Backups and Disaster Recovery.
Exercises on Discrete distributions
Project 2: ATM’s & Queues
AUSTIN ENERGY’S BILLING SYSTEM CAN’T LIGHT UP Handles electrical water and waste disposable for a city of Austin, Texas and surrounding countiies Serving.
Topic 10Summer London Ambulance System Some of the slides created by Sommerville.
Backup and Recovery Part 1.
By Jim Halios.  Healthcare.gov  State of California payroll system  State of Pennsylvania unemployment compensation system.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 12: Managing and Implementing Backups and Disaster Recovery.
System Testing There are several steps in testing the system: –Function testing –Performance testing –Acceptance testing –Installation testing.
USS Yorktown (1998) A crew member of the guided-missile cruiser USS Yorktown mistakenly entered a zero for a data value, which resulted in a division by.
CRASH AND BURN ARIANE 5 Kristen Hieronymus SYSM6309 Advanced Requirements Engineering
CRASH AND BURN ARIANE 5 Kristen Hieronymus SYSM6309 Advanced Requirements Engineering
Why is software engineering worth studying?  Demand for software is growing dramatically  Software costs are growing per system  Many projects have.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 12: Managing and Implementing Backups and Disaster Recovery.
ITGS Software Reliability. ITGS All IT systems are a combination of: –Hardware –Software –People –Data Problems with any of these parts, or a combination.
The Ariane 5 Launcher Failure June 4th 1996 Total failure of the Ariane 5 launcher on its maiden flight.
Liability for Computer Errors Not covered in textbook.
Software Engineering Background Dr. David A. Gaitros.
CS 430/530 Formal Semantics Paul Hudak Yale University Department of Computer Science Lecture 1 Course Overview September 6, 2007.
2008 NAPHSIS Annual Meeting Celebrating 75 Years of Excellence Orlando, FL June 1 st – 5 th, 2008 The Kentucky Vital Records EVVE Experience.
High Availability for Information Security Managing The Seven R’s Rich Schiesser Sr. Technical Planner.
Dr D. Greer, Queens University Belfast Chapter One 1 Software Engineering Chapter One Introduction Learning Outcomes Appreciate the problems associated.
INVARIANTS EEN 417 Fall When is a Design of a System “Correct”? A design is correct when it meets its specification (requirements) in its operating.
What is a BIOS? * basic input/output system (BIOS), also known as the System BIOS * The BIOS software is built into the PC on a non-volatile ROM and is.
Project 2: ATM’s & Queues. ATM’s & Queues  Certain business situations require customers to wait in line for a service Examples:  Waiting to use an.
1 Selecting LAN server (Week 3, Monday 9/8/2003) © Abdou Illia, Fall 2003.
Success in project management In one way or another you will all have some experience of managing projects. You will most certainly have been doing this.
Ethics of Software Testing Thomas LaToza CS 210 Final Presentation 12 / 2 / 2002.
Lecture 08 – Documentation, debugging.  docstring  A special kind of string (text) used to provide documentation  Appears at the top of a module 
Week 3 Outline Post-Mortem By: Jamaral Johnson. 2 After Actions Review In this presentation I will do my best to highlight what went wrong. This is just.
The Software Crisis A Report from 1979.
Who Says Servers Can’t Crash? Rocky Mountain PBS Survives Multiple Server Crashes and Lives to tell about it! Presented By Michelle Nesmith Rocky Mountain.
Therac-25 CS4001 Kristin Marsicano. Therac-25 Overview  What was the Therac-25?  How did it relate to previous models? In what ways was it similar/different?
RELIABILITY ENGINEERING 28 March 2013 William W. McMillan.
Software Defects.
ICT 111 – PART 2 APPLICATIONS SOFTWARE /11: APPLICATIONS SOFTWARE Remember: Computer hardware VS human body Computer operating systems VS human.
Software Development. Software Development Loop Design  Programmers need a solid foundation before they start coding anything  Understand the task.
IT Security Policy: Case Study March 2008 Copyright , All Rights Reserved.
Component 4/Unit 5-2. VBA Code 1Dim HoursWorked As Single 2 Dim PayRate As Currency 3 Dim GrossPay As Currency 4 Private Sub cmdTotalPay_Click() 5 PayRate.
Physics Force and Motion Test Question Explanations.
Did the FAA Fly Off Course? By Ronald Zarr. Two Types of Computer Systems Airport Control Systems - systems used at all commercial airports that control.
Chapter 8 System Management Semester 2. Objectives  Evaluating an operating system  Cooperation among components  The role of memory, processor,
Objective: Today in class we will review to describe the different levels of courts and their powers. The source of power of the federal court, and the.
Topic 10Summer Ariane 5 Some slides based on talk from Sommerville.
Victoria Ibarra Mat:  Generally, Computer hardware is divided into four main functional areas. These are:  Input devices Input devices  Output.
SOFTWARE FAILURES.
What is a Functional Spec?  Defines what the functionality will be NOT how it will be implemented  Describes features of the software product product's.
Component 1.6.
ECE 103 Engineering Programming Chapter 2 SW Disasters
Space Travel Present & Future
The Top 10 bugs
The Accident On October 26th 1992 the London Ambulance System failed.
Motherboard BIOS and Troubleshooting
Software Engineering Disasters
What is a System? A system is a collection of interrelated components that work together to perform a specific task.
CHAPTER 6 Testing and Debugging.
Presentation transcript:

C ASE S TUDY 1 Software Engineering

S TATISTIC Conducted by Standish Group – IT executives of US companies in different industries 8,380 projects The Standish Group estimated U.S. IT projects wasted $140 billion—$80 billion of that from failed projects—out of a total of $250 billion in project spending Source:

S TATISTIC ( CONT.) average cost overrun = 189% average time overrun = 222%. 61% of originally specified features included  ?

O VER B UDGET “A Home Office IT project run by Bull Information Systems is expected to blow its budget by millions of pounds and is hampered by a restrictive contract, according to a leaked report. The National Audit Office report, due in the Spring, is expected to reveal damning evidence that the project to implement two systems - the National Probation Service Information Systems Strategy, and the Case Record and Management System - for the probation service will cost £118m by the end of the year, 70 per cent over its original budget. “ Source:

O VER B UDGET / O VER S CHEDULE New air traffic system already obsolete: “National Air Traffic Services (Nats) is already looking at replacing the systems at its new control centre at Swanwick in Hampshire, even though the system doesn't become operational until next week. Now running six years late and £180m over budget, the system will control 200,000 square miles of airspace over England and Wales, looking after two million flights a year. It will finally go live on 27 January. “ “But long-term planners are already looking at replacing the systems.” “Swanwick was originally meant to be operational by 1997, but problems with the development of software by Lockheed Martin caused delays, according to Nats.” Source: [ ]

O VER B UDGET / O VER S CHEDULE ( CONT.) … Air traffic control system crashes again [ ]

O VER S CHEDULE Central Provident Fund (CPF) Singapore: a nationwide social security savings program for working Singapore citizens and Permanent Residents “IBM was unable to deliver according to contractual agreements despite extensions to the project deadline” The contract was eventually terminated in 2004 Central Provident Fund (CPF) Board filed a civil suit against IT giant IBM, over the deployment of a software system contracted to the vendor in 2001 Source:

U SABILITY AU$250 million ICS (Integrated Cargo System) to replace one that had been operating for more than 20 years Problems in the system have caused massive delays to container clearances, resulting in a backlog of cargo at some ports Electronic messages had been trapped for up to several hours, slowing clearance of imports and prompting claims from one state minister key NSW ports were within a couple of days of being forced to turn cargo-bearing ships away It is recommended that the sea cargo component of ICS be turned off, and industry revert to the previous system Source:

S AFETY Emergency calls system effectively did away with the radio and telephone calls to stations, with the computer dispatching crews to answer calls. But within hours, during the morning rush, calls were going missing in the system; ambulances were arriving late or doubling up on calls. Distraught emergency callers were also held in a queuing system which failed to put them through for up to 30 minutes. As many as 20 people died. Causes: assumed location of ambulances known, memory leak, operators left out Source:

T HREATS TO H UMAN L IFES Therac-25 medical accelerator: a radiation therapy device The device malfunctions and delivers lethal radiation doses at several medical facilities It could deliver two different kinds of radiation: either a low-power electron beam (beta particles) or X-rays Because of race condition, a quick-fingered typist could accidentally configure the Therac-25 so the electron beam would fire in high-power mode but with the metal X-ray target out of position At least five patients die; others are seriously injured Source:

P ROGRAMMING /T ESTING E RROR Ariane 5: took 10 years and $7 billion to produce At 39 seconds after launch, as the rocket reached an altitude of two and a half miles, a self-destruct mechanism finished off Ariane 5 Cause of error: computer program trying to stuff a 64-bit number into a 16-bit space, causing the rocket to make an abrupt course correction that was not needed, compensating for a wrong turn that had not taken place. The guidance system had in fact shut down 36.7 seconds after launch, when the guidance system's own computer tried to convert one piece of data -- the sideways velocity of the rocket -- from a 64-bit format to a 16-bit format = overflow error.

P ROGRAMMING /T ESTING E RROR ( CONT.) When the guidance system shut down, it passed control to an identical, redundant unit, which was there to provide backup in case of just such a failure. Guess what - the second unit (having the same software) failed too. In an earlier design decision, the programmers had decided that this particular velocity figure would never be large enough to cause trouble. After all, it never had been before. BUT Ariane 5 was a faster rocket than Ariane 4. One extra absurdity: the calculation containing the bug actually served no purpose once the rocket was in the air. Its only function was to align the system before launch. So it should have been turned off. Source:

More on software failures:

H UMAN E RROR EDB Fellesdata AS runs the computer services of about half of Norway's banks. On Thursday 2 Aug 2001, they apparently installed about 280 disks in their Hitachi storage. Then, instead of initializing the new disks, they initialized all their disks -- thereby wiping out the entire warehouse. EDB Fellesdata considering lawsuits Source:

A FTER 10 YEARS... The Standish Group has studied over 40,000 projects in 10 years. Project failures have declined to 15 percent of all projects Projects meeting the “challenged” description— meaning that they are over time, over budget and/or lacking critical features and requirements— total 51 percent of all projects in the current survey. The average project cost overrun in 2004 was found to be 43 percent U.S. projects waste $55 billion from total project spending of $255 billion