DO-178B Beginning
Everything was a dust and gas cloud.. Okey, not that
long ago, lets skip appearing of DO-178A in 1985 and talk about B version that
appeared with improving A. “Software
Considerations in Airborne Systems and Equipment Certification” titled
document published by DO-178B RTCA. As the title suggests, pursuit is that
softwares fulfill the requirements of convenience to flight. How to fulfill these requirements is
completely depend on developer. – We shouldn’t feel that relax because
fulfilling DO-178B requirements will require substantially sensibility ($).
The requirements of convenience to flight are about
how system safety is affected in case of
failure in software running in
aircraft. For people who ask how much it can be affected , it runs without any
software (it happened to me in a seminar); we can explain with a few examples.
Example 1: Failure in video player’s software in
entertainment system of airplane.
Possible Consequence: Passengers who are unhappy,
maybe angry but still can breathe.
Example 2: Failure in software controlling the airplane
during instrumented landing in case of 0 visibility ( fog, etc.).
Possible Consequence: Burned passengers who stuck in
the debris or fly out of plane without knowing anything.
These two examples I gave are proof that this job is
serious and various softwares have responsible for different jobs. Safety of
system is affected differently in case of
failure in entertainment and
automatically landing systems’ software in plane. For this reason, two
different software systems should be developed and tested according to two different
safety levels.
In order to explain these different safety critical
situations, DO-178B defined software systems in 5 levels.
Level A: Softwares causing fatal (Catastrophic)
outcomes in case of failure.
Level B: Softwares causing dangerous/risky (Hazardous)
outcomes in case of
failure .
Level C: Softwares causing critical (Major) outcomes
in case of failure
Level D: Sofwares causing less risky (Minor) outcomes
in case of
failure .
Level E: Software not causing any risky outcomes in
case of
failure .
When
system safety assessments and impact analyzes are completed, levels i mentioned
above can be defined into software. We will explain how to make system safety
assessment and impact analyzes in another writing. What should be paid
attention is that this period is a critical period when serious analyzes and
assessments are made and levels are defined into software. Unfortunately, in
case of especially contractor-subcontractor situations, there are examples
where breakdowns and levels are stated without caring, and this cause safety
languor in aircrafts in addition to loss of money, labor, and time.
If
we consider that objective number is 66 in Level A software, 65 in Level B
software, and 57 in Level C software, improving team of a software wantonly
stated high level will have to complete more targets, and each target that must
be completed costs thousands of dollars. If they don’t do so, a software
leveled less than normal will cause risky situations, and it may cause loss of
life and property because of not
controlled possibility.
Does improving software with guidance of DO-178B make softwares that we
improved safe? Maybe.. It is certain that DO-178B set serious targets to
prevent errors, but it doesn’t guarantee to annihilate them. Interesting aspect
of this , researches show that most of plane accidents is caused from that
systems run in a wrong way, and the other systems depend on them, not they
don’t run. For example, Turkish Airlines TK-1951 flight numbered plane to
Netherlands crashed while landing , and 135 individual lost their lives. When
accident report is examined, it can be seen that radar altimeter of plane measured
height of plane wrongly, automatic pilot broke speed and engine power by
depending on this data, and plane crashed.
DO-178B does not guarantee safe software but it enable to establish
possible breakdowns with methodologies that it recommends. How? Control..
Control again.. And control again.. And control again and again..
Pre-defined targets lead to developers in order not to fall into traps
in nature of improving. Processes below that are targets form the backbone of
DO-178B.
- Planning Process
-
Development Process
-Requirement
Process
-Design
Process
-Codding
Integration Process
-Test
and Verification Process
-Configuration
Process
-Quality
Assurance Process
These processes that are known by many developers are adressed
with some differences in D0-178B. For CMMI Level 3 firm, carrying out DO-178B
processes cost normally extra 35-40 %. Reason of that I said “normally” is a
fact that this number is between 75% and 150%,which is much more than average
of industry. In another writing, in the scope of DO-178B , i will try to
explain how to adress each processes, how are they adressed generally, and
semtinizing mistakes and consequences step by step.
Hiç yorum yok:
Yorum Gönder