[SystemSafety] A Critical-System Assurance Manifesto

[Derek M Jones]

Peter,

> Statistical testing sets a bound on reliability for a *specified input
> profile*. We cannot change the input profile and assume the bound still
> holds.

Can we ever hope to know what the input profile to a program
might be?

Without this attempts to build an accurate software reliability model
are doomed.

-- 
Derek M. Jones           Software analysis
tel: +44 (0)1252 520667  blog:shape-of-code.coding-guidelines.com